Git-Mirrors/qubes-mirage-firewall
1
0
Fork 0
mirror of https://github.com/mirage/qubes-mirage-firewall.git synced 2025-04-11 10:19:14 -04:00
Code Issues Packages Projects Releases Wiki Activity

fallback to Qubes netvm_mac=fe:ff:ff:ff:ff:ff is our netvm does not reply to us

Browse Source
This commit is contained in:
Pierre Alain 2025-02-06 12:07:29 +01:00
parent d8871f68c0
commit 2b2ac42ebc
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
dispatcher.ml
View File

@ -571,7 +571,14 @@ struct
I.connect ~cidr ~gateway eth arp >>= fun ip ->
U.connect ip >>= fun udp ->
let netvm_mac =
Arp.query arp gateway >|= or_raise "Getting MAC of our NetVM" Arp.pp_error
Arp.query arp gateway >>= function
| Error e ->
Log.err(fun f -> f "Getting MAC of our NetVM: %a" Arp.pp_error e);
(* This mac address is a special address used by Qubes when the device
is not managed by Qubes itself. This can occurs inside a service
AppVM (e.g. VPN) when the service creates a new interface. *)
Lwt.return (Macaddr.of_string_exn "fe:ff:ff:ff:ff:ff")
| Ok mac -> Lwt.return mac
in
let interface =
new netvm_iface eth netvm_mac ~my_ip ~other_ip:config.Dao.netvm_ip