[qubes-devel] Route between sys-net and appvm without masquerading/snat at sys-firewall

2018-03-12 Thread Tom Carroll
Hello Qubes devs, I'm working on a project where I don't want the AppVM to be masqueraded as the sys-firewall from the perspective of sys-net (I desire to see the ip address of the appvm). This is necessary for my application, as I desire sys-net to perform per-appvm task, such as (as an

Re: [qubes-devel] Route between sys-net and appvm without masquerading/snat at sys-firewall

2018-03-17 Thread Tom Carroll
Marek - On 03/13/2018 02:41 AM, Marek Marczykowski-Górecki wrote: If you're using R4.0, check also nftables, see here: https://www.qubes-os.org/doc/firewall/#port-forwarding-to-a-qube-from-the-outside-world Thanks for this tip. It was nftables rulesets making my life hard. ~ Tom -- You