qubes-doc/Dom0Tools/QvmFirewall.md

layout	title	permalink	redirect_from
doc	QvmFirewall	/doc/Dom0Tools/QvmFirewall/	/wiki/Dom0Tools/QvmFirewall/

qvm-firewall

NAME

qvm-firewall

Date
2012-04-10

SYNOPSIS

qvm-firewall [-n] <vm-name> [action] [rule spec]

Rule specification can be one of:

1. address|hostname[/netmask] tcp|udp port[-port]
2. address|hostname[/netmask] tcp|udp service_name
3. address|hostname[/netmask] any

OPTIONS

-h, --help
Show this help message and exit

-l, --list
List firewall settings (default action)

-a, --add
Add rule

-d, --del
Remove rule (given by number or by rule spec)

-P SET_POLICY, --policy=SET_POLICY
Set firewall policy (allow/deny)

-i SET_ICMP, --icmp=SET_ICMP
Set ICMP access (allow/deny)

-D SET_DNS, --dns=SET_DNS
Set DNS access (allow/deny)

-Y SET_YUM_PROXY, --yum-proxy=SET_YUM_PROXY
Set access to Qubes yum proxy (allow/deny). Note: if set to "deny", access will be rejected even if policy set to "allow"

-n, --numeric
Display port numbers instead of services (makes sense only with --list)

AUTHORS

Joanna Rutkowska <joanna at invisiblethingslab dot com> Rafal Wojtczuk <rafal at invisiblethingslab dot com> Marek Marczykowski <marmarek at invisiblethingslab dot com>