Re: [qubes-users] Remarks for Firewall Rules, combine Firewall rules and own iptables rules

2016-10-05 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-10-05 02:49, Robert Mittendorf wrote:
> Hello fellow Qubes-Users,
> 
> I'd like to suggest to have an additional (optional) field in firewall rules 
> to store remarks for specific rules
> (like "needed for xyz" "IP of www.MyHomepage.de" and others)
> 
> Is it possible to use Qubes firewall rules and own iptables-rules together, 
> or will the firewall rules overwrite any own iptables config?
> 
> Thank you,
> 
> 
> Robert
> 

This suggestion is already being tracked here:

https://github.com/QubesOS/qubes-issues/issues/952

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=X8cO
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/db5356d9-1320-793b-8a2a-d612b4954129%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Remarks for Firewall Rules, combine Firewall rules and own iptables rules

2016-10-05 Thread Chris Laprise

On 10/05/2016 05:49 AM, Robert Mittendorf wrote:

Hello fellow Qubes-Users,

I'd like to suggest to have an additional (optional) field in firewall 
rules to store remarks for specific rules

(like "needed for xyz" "IP of www.MyHomepage.de" and others)

Is it possible to use Qubes firewall rules and own iptables-rules 
together, or will the firewall rules overwrite any own iptables config?


Thank you,


Robert



Good suggestion. Some have also asked for a comment field for the VMs.

You can combine firewall rules in a proxyvm; IIRC the vm settings rules 
(applied first) will combine with the ones in the proxyvm 
qubes-firewall-user-script (applied second).


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/30aa1c7d-5454-8450-c7a7-2a482053f889%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Remarks for Firewall Rules, combine Firewall rules and own iptables rules

2016-10-05 Thread Robert Mittendorf

Hello fellow Qubes-Users,

I'd like to suggest to have an additional (optional) field in firewall 
rules to store remarks for specific rules

(like "needed for xyz" "IP of www.MyHomepage.de" and others)

Is it possible to use Qubes firewall rules and own iptables-rules 
together, or will the firewall rules overwrite any own iptables config?


Thank you,


Robert

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b72ece35-1556-4207-15c0-028acad68a7c%40digitrace.de.
For more options, visit https://groups.google.com/d/optout.