On 7/16/19 11:21 AM, haaber wrote:
Hello, entering IP adresses in the firewall restriction list can be a a lengthy and unpleasant exercise. If your admin-VM should only be able access your bank, whose webpage loads various data over JS encapsulated subdomains, it can take a long while to make that working. The natural question would be to allows domains by *name* rather than IP ranges. For example *.mybank.com Is that possible? Cheers
It is possible by full domain name. I.e. your *. is not possible.Moreover there will be issues with DNS load balancers etc. as the IP is only resolved once (during startup) by the firewall and then used instead of the domain name.
There might be a respective feature request @github. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7fcd18ef-c1ce-067a-850b-083fed954150%40hackingthe.net. For more options, visit https://groups.google.com/d/optout.
smime.p7s
Description: S/MIME Cryptographic Signature
