Prevent ipv6 leaks.

Addresses qubes-users report from evastar.
This commit is contained in:
Christopher Laprise 2019-02-20 17:32:32 -05:00
parent 98f5eb14a6
commit fc19b6cf5d
No known key found for this signature in database
GPG Key ID: 448568C8B281C952

View File

@ -80,6 +80,8 @@ Set up a ProxyVM as a VPN gateway using NetworkManager
# (in case the vpn tunnel breaks)
iptables -I FORWARD -o eth0 -j DROP
iptables -I FORWARD -i eth0 -j DROP
ip6tables -I FORWARD -o eth0 -j DROP
ip6tables -I FORWARD -i eth0 -j DROP
```
6. Configure your AppVMs to use the new VM as a NetVM.