mirror of
https://github.com/mirage/qubes-mirage-firewall.git
synced 2024-10-01 01:05:39 -04:00
27 lines
1.2 KiB
Plaintext
27 lines
1.2 KiB
Plaintext
+--------------------+
|
|
| rules from QubesDB |
|
|
+--------------------+
|
|
^
|
|
if-not-in-nat | then check
|
|
|
|
|
+-----------+
|
|
| nat-table |
|
|
+-----------+
|
|
^
|
|
|checks
|
|
|
|
|
+------------+ +-----+----+
|
|
work <---->| +---->| firewall |<--------.
|
|
| | +-----+----+ |
|
|
| | | +----+---+
|
|
[...] <---->| client_net | | | uplink |<----> sys-net
|
|
| | v +--------+
|
|
| | +----------+ ^
|
|
personal <---->| |<----+ router +---------'
|
|
+------+-----+ +----------+
|
|
|
|
|
|monitors
|
|
v
|
|
XenStore
|
|
(dom0)
|