On Mon, Jul 25, 2016 at 3:20 PM, Marek Marczykowski-Górecki < [email protected]> wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On Mon, Jul 25, 2016 at 03:14:02PM -0300, Franz wrote: > > On Mon, Jul 25, 2016 at 2:51 PM, Marek Marczykowski-Górecki < > > [email protected]> wrote: > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA256 > > > > > > On Mon, Jul 25, 2016 at 02:46:55PM -0300, Franz wrote: > > > > On Mon, Jul 25, 2016 at 1:24 PM, Marek Marczykowski-Górecki < > > > > [email protected]> wrote: > > > > > On Mon, Jul 25, 2016 at 12:06:54PM -0300, Franz wrote: > > > > > > On Mon, Jul 25, 2016 at 11:11 AM, Marek Marczykowski-Górecki < > > > > > > [email protected]> wrote: > > > > > > > On Mon, Jul 25, 2016 at 09:37:10AM -0400, Steve Coleman wrote: > > > > > > Anyway regarding Marek script I tried it in a dispVM, it writes: > > > > > > tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture > size > > > > > > 262144 bytes > > > > > > > > > > > > but then if on the same dispVM I use firefox to go to a gmail > > > account or > > > > > > another account, nothing appears on the terminal. > > > > > > > > > > > > I even looked if anything changed on dispVM firewall rules, but > found > > > > > > nothing different. > > > > > > > > > > > > So how is this script working? > > > > > > > > > > I've just tried and it is still working. It should output list of > > > > > blocked destinations in format of qvm-firewall commands ready to > load > > > > > into Qubes firewall. > > > > > > > > > , > > > > "blocked destinations"? This makes me think that I should block > > > > destinations somehow before running the script. Is that so? > > > > > > Yes, change VM firewall to deny by default. > > > > > > > > ok now it works, it outputted a list of addresses. But I have to paste > this > > list on firewall rules of that VM and this is on Qubes Manager that is on > > Dom0, so normal copy paste between VMs does not work. > > > > I can only imagine of writing the addresses on a text file, then copying > > the file to Dom0, using > > > > qvm-run --pass-io <src-vm> 'cat /path/to/file_in_src_domain' > > > /path/to/file_name_in_dom0 > > > > opening the file in Dom0 (which seems half prohibited) and finally > copying > > the adresses to Qubes Manager. > > > > Otherwise I'll have to digit manually the addresses to Qubes Manager. > > > > Which is the suggested way to do that? > > Personally I do some thing like: > qvm-run --pass-io <src-vm> 'cat output-of-that-command' > > After much trying I am unable to figure out how to get this command working. If anybody may give an example I would appreciate. Best Fran Then copy&paste selected lines into shell (those are ready commands to > add firewall entries). > > - -- > Best Regards, > Marek Marczykowski-Górecki > Invisible Things Lab > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQEcBAEBCAAGBQJXllhsAAoJENuP0xzK19cs3D8H+wXB/P9g5h93qcWnyxXajP7w > q+idjhGTUpMUZ2iXDvxnKABt2B4gkoGcjXtRbo7kO1j/iJvd2huMXxl/27iL5X3g > 6U2ZVoE7GD4YPecNfAQj/QKCmU4oyydoFqHu2QZMM9sRawwjjksnETCLm9U1FSxW > jfbHn3srorRRxHBSQQnseYKyIk6HLVYNdh9YW1gBNbatbVgff9fWTPWni5BI2bfo > 01mPlbVX+whfL+5WpBtEPuulTxfp27yfou2FtqI73SSTbpnM/J025cGA8YcQ40Xy > 5Dcuax/p1s75YzAe63yfwngb+/h3WGRNm33LFtHKQdtLIPjKD9p1P7giCXbqyJk= > =W3m8 > -----END PGP SIGNATURE----- > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qCng7-1%2ByPTAehXs0wmz9pWMVGeNmL2C5xyimijTJgfpQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
