-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-05-26 09:00, Unman wrote: > On Thu, May 26, 2016 at 05:50:08AM -0700, [email protected] wrote: >> Hello. >> >> I've been using qubes for a few days now and am getting used to >> the way things work. I want to make a VM that can access other >> computers in my house but not the internet and I'd like to know >> how to do this. >> >> My router assigns IP addresses in the range 192.168.0.xxx to all >> my computers. >> >> Qubes assigns IP addresses in the range 10.137.xx.xx to my VMs. >> >> My home network has a couple of servers that share files, these >> servers run ubuntu and and I can mount the shares from a quebes >> VM as long as I use the IP address of the server. How do I stop >> the VM seeing and being seen by the internet? >> >> Thanks for reading. >> > > By default the VM wont be "seen" from the internet. > > Read the docs on the qubes firewall. To restrict traffic to the > local network open the firewall tool from Manager, and then set: > Deny network access. Add rule allowing traffic to 192.168.0.xxx. > (You can either allow all traffic or restrict to the ports that you > use on the local network.) > > unman >
unman is right. Also, if you want to enable access to the entire CIDR block, then deny all access except "192.168.0.0/16". This should be equivalent to deny all access except to the range 192.168.0.0-192.168.255.255. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXR8HaAAoJENtN07w5UDAw3UgP/RiV17Zaz4gqDGZndxtCaip8 x+LihAvxemArKFMFjjgcggxbKLP2+kjZqkDCUKoPLg0jin3wnXUy3ntfze4O0JCE d6woT1kZCggRuhjYxoYxLXhKPA5umoUkCV4oc+oOUkMcOWOFpG55A6dj08FtvmX1 WhMVRRP+FHQMLxJPNd60evFho6OXmXDTIdhdrNwSKXP4XSapIj0OB3odQeFa7+P7 sv5BA3bYN/c9HkrETASuw3capgRDFcRsQK01npKC2N8yEdajs8LWPZ3IAy6H12zK OXNktQJvtSu8wHfgzUGhn7MqrNWk9Y872nYRMtrUiRlgPLc6xc1ZpKQdItmkzTEj uiSTehRz8khvFOVdxCt6nxpq8zbucnjNs6OUgKkWOSYwh3hrffu1NAUIW6GojDrl GFgdbnNu+fTCU3qgtZc+rlKy+hjiGxWXkVKVJF0+PFHoAhUd2aWTHZwbfmGRVbd6 BeQVHTW80+uZyxIjg7V+bdlsN2TKI2kxCCozE/csa/6PhegRLTokZrmzSHeo8Zdy 8vj5fH01Gj8WRXmAqECAlkuE/PBbUTOd6OaXl8EsdaSGob76PV/6kPHqJzQF/ny6 Y/6D8ak/9JjR9KKFfAh8TEggtrIJ7S3oBnWYFv8v3hSo6cnGmo0hjz0HtlpWhmjN jvAFV7aDu95FO1dNqZst =phFS -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/63ff30e2-68f8-b9c9-2979-cbc29efa4235%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
