QubesFirewall changed

Added info on reconnecting to netvms after they got rebooted
This commit is contained in:
Joanna Rutkowska 2013-11-16 12:08:41 +00:00
parent 7450f056f5
commit a4c8108acc

View File

@ -28,6 +28,21 @@ Note that if you specify a rule by DNS name it will be resolved to IP(s) *at the
Alternatively, one can use the `qvm-firewall` command from Dom0 to edit the firewall rules by hand:
Reconnecting AppVMs after a NetVM reboot
----------------------------------------
Normally Qubes doesn't let the user to stop a NetVM if there are other AppVMs running which use it as their own NetVM. But in case the NetVM stops for whatever reason (e.g. it crashes, or the user forces its shutdown via qvm-kill via terminal in the netvm), then there is an easy way to restore the connection to the netvm by issuing:
``` {.wiki}
qvm-prefs <appvm> -s netvm <netvm>
```
Normally AppVMs do not connect directly to the actual NetVM which has networking devices, but rather to the default FirewallVM first, and in most cases it would be the NetVM that would crash, e.g. in response to S3 sleep/restore or other issues with [WiFi?](/wiki/WiFi) drivers. In that case it is necessary to just issue the above command once, for the FirewallVM (this assumes default VM-nameing used by the default Qubes installation):
``` {.wiki}
qvm-prefs firewallvm -s netvm netvm
```
Enabling networking between two AppVMs
--------------------------------------