qubes-mirage-firewall/firewall.mli

(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>
   See the README file for details. *)

(** Classify IP packets, apply rules and send as appropriate. *)

val ipv4_from_netvm : Router.t -> Nat_packet.t -> unit Lwt.t
(** Handle a packet from the outside world (this module will validate the source IP). *)

val ipv4_from_client : Router.t -> src:Fw_utils.client_link -> Nat_packet.t -> unit Lwt.t
(** Handle a packet from a client. Caller must check the source IP matches the client's
    before calling this. *)
Move NAT code to router and add DNS redirects 2015-12-30 11:07:16 -05:00			`(* Copyright (C) 2015, Thomas Leonard <thomas.leonard@unikernel.com>`
			`See the README file for details. *)`

			`(** Classify IP packets, apply rules and send as appropriate. *)`

Update to new mirage-nat API 2017-03-05 11:31:04 -05:00			`val ipv4_from_netvm : Router.t -> Nat_packet.t -> unit Lwt.t`
Mirage 3 support 2017-03-02 09:52:55 -05:00			`(** Handle a packet from the outside world (this module will validate the source IP). *)`
Move NAT code to router and add DNS redirects 2015-12-30 11:07:16 -05:00
Give exact types for Packet.src Before, the packet passed to rules.ml could have any host as its src. Now, `from_client` knows that `src` must be a `Client`, and `from_netvm` knows that `src` is `External` or `NetVM`. 2019-04-17 06:03:17 -04:00			`val ipv4_from_client : Router.t -> src:Fw_utils.client_link -> Nat_packet.t -> unit Lwt.t`
Mirage 3 support 2017-03-02 09:52:55 -05:00			`(** Handle a packet from a client. Caller must check the source IP matches the client's`
Move NAT code to router and add DNS redirects 2015-12-30 11:07:16 -05:00			`before calling this. *)`