-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Mon, Jul 25, 2016 at 03:14:02PM -0300, Franz wrote: > On Mon, Jul 25, 2016 at 2:51 PM, Marek Marczykowski-Górecki < > [email protected]> wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA256 > > > > On Mon, Jul 25, 2016 at 02:46:55PM -0300, Franz wrote: > > > On Mon, Jul 25, 2016 at 1:24 PM, Marek Marczykowski-Górecki < > > > [email protected]> wrote: > > > > On Mon, Jul 25, 2016 at 12:06:54PM -0300, Franz wrote: > > > > > On Mon, Jul 25, 2016 at 11:11 AM, Marek Marczykowski-Górecki < > > > > > [email protected]> wrote: > > > > > > On Mon, Jul 25, 2016 at 09:37:10AM -0400, Steve Coleman wrote: > > > > > Anyway regarding Marek script I tried it in a dispVM, it writes: > > > > > tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size > > > > > 262144 bytes > > > > > > > > > > but then if on the same dispVM I use firefox to go to a gmail > > account or > > > > > another account, nothing appears on the terminal. > > > > > > > > > > I even looked if anything changed on dispVM firewall rules, but found > > > > > nothing different. > > > > > > > > > > So how is this script working? > > > > > > > > I've just tried and it is still working. It should output list of > > > > blocked destinations in format of qvm-firewall commands ready to load > > > > into Qubes firewall. > > > > > > > , > > > "blocked destinations"? This makes me think that I should block > > > destinations somehow before running the script. Is that so? > > > > Yes, change VM firewall to deny by default. > > > > > ok now it works, it outputted a list of addresses. But I have to paste this > list on firewall rules of that VM and this is on Qubes Manager that is on > Dom0, so normal copy paste between VMs does not work. > > I can only imagine of writing the addresses on a text file, then copying > the file to Dom0, using > > qvm-run --pass-io <src-vm> 'cat /path/to/file_in_src_domain' > > /path/to/file_name_in_dom0 > > opening the file in Dom0 (which seems half prohibited) and finally copying > the adresses to Qubes Manager. > > Otherwise I'll have to digit manually the addresses to Qubes Manager. > > Which is the suggested way to do that?
Personally I do some thing like: qvm-run --pass-io <src-vm> 'cat output-of-that-command' Then copy&paste selected lines into shell (those are ready commands to add firewall entries). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXllhsAAoJENuP0xzK19cs3D8H+wXB/P9g5h93qcWnyxXajP7w q+idjhGTUpMUZ2iXDvxnKABt2B4gkoGcjXtRbo7kO1j/iJvd2huMXxl/27iL5X3g 6U2ZVoE7GD4YPecNfAQj/QKCmU4oyydoFqHu2QZMM9sRawwjjksnETCLm9U1FSxW jfbHn3srorRRxHBSQQnseYKyIk6HLVYNdh9YW1gBNbatbVgff9fWTPWni5BI2bfo 01mPlbVX+whfL+5WpBtEPuulTxfp27yfou2FtqI73SSTbpnM/J025cGA8YcQ40Xy 5Dcuax/p1s75YzAe63yfwngb+/h3WGRNm33LFtHKQdtLIPjKD9p1P7giCXbqyJk= =W3m8 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160725182028.GK32095%40mail-itl. For more options, visit https://groups.google.com/d/optout.
