Commit Graph

  • 8f2bee4fb1 restore space to firewall test log name Mindy 2019-06-10 10:39:13 -05:00
  • dce19f2c90 set log levels to minimize noise Mindy 2019-06-10 10:39:05 -05:00
  • b164a1a5ab change output for corrupted UDP packet response case Mindy 2019-06-10 09:46:09 -05:00
  • 959fb31173 pass the source port when sending UDP fetch test packet Mindy 2019-06-10 09:35:21 -05:00
  • 934dd81edf WIP linse 2019-06-07 15:44:45 +02:00
  • 056873e25b WIP: changing output to be more human-readable Mindy 2019-06-04 11:55:42 -05:00
  • faa5b37139 add update-firewall script Mindy 2019-06-04 11:05:48 -05:00
  • 43960c6080 add notes on setup program flow Mindy 2019-05-31 14:19:45 -05:00
  • 448ba654fb
    Merge pull request #69 from jaseg/patch-1 Thomas Leonard 2019-05-31 09:06:09 +01:00
  • 0a4b01a841
    Fix ln(1) call in build instructions jaseg 2019-05-31 12:50:33 +09:00
  • 010e5945a6 try to read rules dynamically Mindy 2019-05-30 19:05:48 -05:00
  • 27de63ffed make rules a mutable field in client_link; don't read and set them at connect time Mindy 2019-05-30 18:08:59 -05:00
  • 7d22eafa59
    Merge pull request #68 from talex5/updatevm yomimono 2019-05-29 17:55:25 -05:00
  • 0c571a0601
    Merge pull request #67 from talex5/fix-typo yomimono 2019-05-29 17:54:51 -05:00
  • 3ab7284a64 Note that mirage-firewall cannot be used as UpdateVM Thomas Leonard 2019-05-29 15:22:15 +01:00
  • de7d05ebfa Fix typos in docs Thomas Leonard 2019-05-29 08:37:31 +01:00
  • adb451e7e3
    Merge pull request #66 from talex5/add-changelog v0.6 yomimono 2019-05-28 15:25:48 -05:00
  • ee97d67c84 Add CHANGELOG Thomas Leonard 2019-05-28 21:04:31 +01:00
  • b15dd32df8 apply rules to incoming traffic (but...) Mindy 2019-05-23 17:40:07 -05:00
  • 068c5dca9b WIP. linse 2019-05-23 21:31:20 +02:00
  • 83026f4067 Parse firewall rules from QubesDB (but don't apply them yet :D) linse 2019-05-18 04:06:09 +02:00
  • a63fcf0dbb Set up everything for rule reading from QubesDB (but don't do it yet ;-) ) linse 2019-05-18 02:49:30 +02:00
  • bf8f7c7fd2 test against udp echo server Mindy 2019-05-22 10:56:22 -05:00
  • 5379b91b5a add comments about what to do next Mindy 2019-05-22 10:56:01 -05:00
  • aca6ac84d8 WIP. linse 2019-05-18 01:29:50 +02:00
  • 41126c9a6b Handle the exception to check if it was thrown when expected. linse 2019-05-17 23:58:51 +02:00
  • 09139518fb Rename to test.sh, break if build fails. linse 2019-05-17 23:17:04 +02:00
  • 1599f63838 Initial test setup. :) linse 2019-05-17 01:35:11 +02:00
  • 47e3c6c64c Add test directory and setup instructions in setup.sh linse 2019-05-17 00:48:04 +02:00
  • c55819ffdf
    Merge pull request #64 from talex5/combine-ips yomimono 2019-05-16 18:03:59 -04:00
  • 3ac145c1ff add some docstrings for host type options Mindy 2019-05-16 17:48:26 -04:00
  • 45ffee89e1 fix merge mistake :) Mindy 2019-05-16 17:48:17 -04:00
  • 0d54f80b6b try to make the packet type difference a bit clearer Mindy 2019-05-16 17:44:58 -04:00
  • ad48a0f78a remove commented out thing Mindy 2019-05-16 17:24:19 -04:00
  • f2c309c923 packet.mli yay Mindy 2019-05-16 17:23:38 -04:00
  • 1fb1d35170 it builds yey Mindy 2019-05-16 17:23:19 -04:00
  • 1e7d894cf9 wip moremake Mindy 2019-05-16 17:06:25 -04:00
  • 199bc32516 Merge branch 'static-pf-rules' of github.com:yomimono/qubes-mirage-firewall into static-pf-rules Mindy 2019-05-16 15:56:35 -04:00
  • 6464d9b05e WIP linse 2019-05-16 21:53:54 +02:00
  • 1e7adb4a72 begin changing the info type to something we find more comprehensible Mindy 2019-02-27 04:43:22 -06:00
  • 672c82c43c Combine Client_gateway and Firewall_uplink Thomas Leonard 2019-05-16 19:18:31 +01:00
  • 5119a22ca4 Make a dummy rule that drops all traffic. linse 2019-05-15 00:02:15 +02:00
  • a7ddc548f3 build against pf with qubes-ready rule definitions Mindy 2019-05-14 16:05:34 -04:00
  • a93bb954d7
    Merge pull request #54 from talex5/rule-examples Thomas Leonard 2019-05-07 10:03:42 +01:00
  • 691c4ae745 Update build hash Thomas Leonard 2019-05-06 10:37:24 +01:00
  • e15fc8c219 Make example rule more restrictive Thomas Leonard 2019-05-03 11:12:58 +01:00
  • eec1e985e5 Add overview of the main components of the firewall Thomas Leonard 2019-05-03 10:45:15 +01:00
  • b60d098e96 Give exact types for Packet.src Thomas Leonard 2019-04-17 11:03:17 +01:00
  • 189a736368 Add some types to the rules Thomas Leonard 2019-04-17 10:26:32 +01:00
  • acf46b4231 Allow naming hosts and add examples to rules.ml Thomas Leonard 2019-04-11 12:25:19 +01:00
  • 433f3e8f01
    Merge pull request #61 from talex5/fix-mac Thomas Leonard 2019-05-06 10:32:50 +01:00
  • d7b376d373 Respond to ARP requests for *.*.*.1 Thomas Leonard 2019-05-05 17:26:56 +01:00
  • 8b4cc6f5a9 Improve logging Thomas Leonard 2019-05-06 09:54:35 +01:00
  • 0a4dd7413c Force backend MAC to fe:ff:ff:ff:ff:ff to fix HVM clients Thomas Leonard 2019-05-01 10:05:14 +01:00
  • 65b79208a1
    Merge pull request #60 from talex5/await-net-config yomimono 2019-04-30 16:18:08 -05:00
  • 321a93aa5d
    Merge pull request #58 from talex5/advisories yomimono 2019-04-30 16:13:40 -05:00
  • 9d2723a08a Require mirage-nat >= 1.2.0 for ICMP support Thomas Leonard 2019-04-28 16:10:02 +01:00
  • c7fc54af02 Wait if dom0 is slow to set the network configuration Thomas Leonard 2019-04-28 16:06:03 +01:00
  • eb14f7e777 Link to security advisories from README Thomas Leonard 2019-04-26 12:38:36 +01:00
  • 5e1588f861
    Merge pull request #55 from talex5/fix-icmp Thomas Leonard 2019-04-17 11:45:40 +01:00
  • 45eef49c95 Upgrade to latest mirage-nat to fix ICMP Thomas Leonard 2019-04-16 18:05:08 +01:00
  • debd34cc3a
    Merge pull request #52 from talex5/repro-builds yomimono 2019-04-13 12:15:57 -05:00
  • 7000d9a010
    Merge pull request #51 from talex5/update-docs yomimono 2019-04-13 12:14:14 -05:00
  • 5958cfed97 Clarify how to build from source Thomas Leonard 2019-04-08 10:23:34 +01:00
  • 06511e076f Add patch to cmdliner for reproducible build Thomas Leonard 2019-04-08 10:34:30 +01:00
  • 14461c3960
    Merge pull request #49 from talex5/repro-archive yomimono 2019-04-07 18:37:46 -05:00
  • 74479c792e Use source date in .tar.bz2 archive Thomas Leonard 2019-04-05 09:37:02 +01:00
  • 88b55acaed
    Merge pull request #48 from talex5/update-readme Mindy Preston 2019-04-04 12:05:06 -05:00
  • bd7babeda0 Remove Qubes 3 instructions from README Thomas Leonard 2019-04-04 11:04:09 +01:00
  • 3fc9790203
    Merge pull request #47 from talex5/update-deps v0.5 Thomas Leonard 2019-04-03 19:53:54 +01:00
  • cb7078633e Update dependencies Thomas Leonard 2019-04-03 12:32:13 +01:00
  • 7f10c24232
    Merge pull request #46 from hannesm/no-14 Mindy Preston 2019-03-25 10:43:13 -05:00
  • aa405530b4
    Merge pull request #45 from yomimono/just-into-cstruct Thomas Leonard 2019-03-24 13:33:05 +00:00
  • 3553a7aa93 use Ethernet_wire.sizeof_ethernet instead of a magic '14' Hannes Mehnert 2019-03-24 14:29:21 +01:00
  • 7f99973a02 Update Docker build for Mirage 3.5 Thomas Leonard 2019-03-24 13:13:11 +00:00
  • f1a946af4e
    Merge pull request #44 from xaki23/master Thomas Leonard 2019-03-23 17:00:18 +00:00
  • 0852aa0f43 use tcpip 3.7, ethernet, arp, mirage-nat 1.1.0 Mindy 2019-03-17 16:32:17 -05:00
  • d7cd4e2961 typo fix Mindy 2019-03-17 17:42:05 -05:00
  • 04bea6e9ba
    update ocaml version (from 4.05 to 4.07), pin-down mirage version (to 3.4, 3.5 is current) xaki23 2019-03-06 23:43:49 +01:00
  • 455149249f
    Merge pull request #43 from mirage/update-readme Thomas Leonard 2019-03-01 09:06:31 +00:00
  • ab88d413c4
    Update links from talex5 to mirage Thomas Leonard 2019-02-26 16:57:40 +00:00
  • 2edb088650 Update to latest Debian and opam Thomas Leonard 2019-02-01 09:25:29 +00:00
  • 4526375a19 Note that Git versions might have different hashes Thomas Leonard 2019-01-19 10:32:27 +00:00
  • ef09eb50ac Update last known build hash Ahmed Al-Sudani 2019-01-16 14:17:09 -05:00
  • 791342d508
    Merge pull request #38 from talex5/fix-restart-delay Thomas Leonard 2019-01-10 13:11:44 +00:00
  • d849a09a25 Don't wait for GUI before attaching client VMs Thomas Leonard 2019-01-10 12:39:39 +00:00
  • b123abb1d3
    Merge pull request #37 from xaki23/master Thomas Leonard 2018-12-01 13:35:15 +00:00
  • 184d320a8f
    add stub makefile for qubes-builder xaki23 2018-11-30 00:08:26 +01:00
  • 8ed4289b2a
    Merge pull request #36 from talex5/fix-docker-build Thomas Leonard 2018-11-04 14:59:48 +00:00
  • 0d0159b56f Update build instructions for latest Fedora Thomas Leonard 2018-11-04 14:33:47 +00:00
  • d6b4dc6a52
    Merge pull request #33 from talex5/fix-docker-build Thomas Leonard 2018-11-03 18:22:01 +00:00
  • 78e219da8c Update Debian base image in Docker build Thomas Leonard 2018-11-03 17:25:40 +00:00
  • 7ddeb1e03b
    Merge 2a7de5ecaf429085f0ec7b88cc18dff24a01518c into 2fd9e6a136f7c53deb59fb72589250df83931e92 Holger Levsen 2018-03-15 23:49:11 +00:00
  • 2a7de5ecaf Don't emit TODO to console every 5 minutes Holger Levsen 2018-03-12 15:01:06 +00:00
  • 2fd9e6a136
    Merge pull request #27 from talex5/qubes-4-readme Thomas Leonard 2018-01-06 12:35:36 +00:00
  • b77d91cb20 Add installation instructions for Qubes 4 Thomas Leonard 2018-01-06 12:09:26 +00:00
  • 2a220e1277 Merge a1b2aadff1d945c40fbff9575e7b0cbe4931c6ce into 6e6ff755ebf7337c1f39bafebbc50c63a8de30af Mindy Preston 2018-01-06 11:50:26 +00:00
  • a1b2aadff1 add qubes 4 hints Mindy 2018-01-06 05:48:38 -06:00
  • 6e6ff755eb Update to newly released version of netchannel v0.4 Thomas Leonard 2017-12-16 12:37:42 +00:00
  • b61527c9a9 Update to newly released version of netchannel Thomas Leonard 2017-12-16 12:37:42 +00:00