-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-07-21 06:59, [email protected] wrote: > I'm created a VM that I want to use for online banking. I want to set the > firewall rules so that it can only access the bank's website but it is > proving to be tricky. The issue is that I go to www.bank.com and I added > this to the VM firewall. When I try to log in, it goes to online.bank.com > and then to secure.bank.com. I've added all of these to the firewall but > it is still getting stuck somewhere. > > I can log in fine from a disposable VM. Is there a way to log all the web > addresses that the disposable VM accessed during my banking session so > that I can add them all the the banking VM's firewall? > > Alternatively, can I add *.bank.com? >
Your best bet is to whitelist the entire CIDR block of bank's domain (and hope the site doesn't rely too much on CDNs). You can typically find the CIDR block in the domain's WHOIS information: $ host bank.com bank.com has address 000.000.000.000 $ whois 000.000.000.000 [...] CIDR: 000.000.0.0/0 [...] Then you'd allow all HTTPS connections to 000.000.0.0/0 in that VM's firewall settings. You may have to repeat for subdomains, as well as any other domains the site relies upon. If things still aren't loading properly, use the developer console in your browser (e.g., press F12) to see the domains of any network resources that aren't being loaded properly, then follow the same procedure to whitelist those, as well. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXkqD9AAoJENtN07w5UDAwP2oP/Rb3kDrAeFL557eF5OUVdswI 89p6pJpCQd3iPYMyUwyPwcneTEfQgZ2/nWPwPJtbzYvpVcH2iZIscXucaDvnWKQh AIontnTA3VWhKqTOJy5ntWA7Sd28dz69kzxlBthAUewNq1awUjq1M1zQogfl3heR XQ4eBqHv0W0gNFZNhdPuGBBx3q7mAQe643dnsgCxYo9flBf0YdBZ1ICaRDFaX+8A crAUxd3BGGcNP23kOFhg0j6ncGOXfja+ONJAAdApZ+5Sz1itAZLlCZd/1VikvCSh f2Wv5PJqCaibnAzn76T4i8c+UR6VA9eIGbeI5FP2KTuEwE3kDrIsRGqK3OQe40fC zdD9yeRhGgi6Ph8DUxl+svWYEUQ/PcfQcNbJBDZxtg4D3aIgfXjbjDgocDhNUIPJ HPPVAwnVhlJZFKH3ME0twwZLcgJQZymK0Cq8ah475KCjZ+cw0mlm8wyeARPxxqWL RIbzZO1TmZTsD+XrT5g38ITUEJFJrFMxMwipwjJUqupb+2CmnjehABBpXa5gok6C OCMJ2Z88+gfiYRjybuMqx09XzGdg+6nAW09EIXCaNHKt9iCCWxAL3YseWUnGWtu2 FBg8WWEXmJN/ovTiVuQfU82kvEHO97dVKHZ0zcpL1ARnlig5PQcah3mBbUjYHAS6 Hxii1+oUpnAxFMIZWZ2d =zEZR -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/fd7e3e27-7995-3c2b-66be-df293815f96f%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
