Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-25 Thread 54th Parallel
On Wednesday, 26 August 2020 at 11:00:36 UTC+8 sv...@svensemmler.org wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 8/22/20 10:10 AM, unman wrote: > > To deal with the question here, I use debian minimal templates > > extensively, (NOT with qubes-vm-hardening), and have

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-25 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 8/22/20 10:10 AM, unman wrote: > To deal with the question here, I use debian minimal templates > extensively, (NOT with qubes-vm-hardening), and have never seen > this issue - neither the unreliable firewall nor the warning > prompts issue. I've

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-22 Thread unman
On Sat, Aug 22, 2020 at 02:01:54AM -0700, 54th Parallel wrote: > On Friday, 21 August 2020 at 16:58:48 UTC+8 54th Parallel wrote: > > > I'm having the same issue with disposable firewalls built on > > debian-10-minimal, with the minimum amount of packages, on > > brand-spanking-new

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-22 Thread 54th Parallel
On Saturday, 22 August 2020 at 18:57:22 UTC+8 Frank Schäckermann wrote: > I am not sure what you mean with „behind a vpn vm“. > > My setup is such that I have the sys-net VM which is used as network vm in > sys-firewall and a few sys-vpn-xxx. sys-firewall in turn is used as network > vm for all

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-22 Thread Frank
> On 22. Aug 2020, at 11:01, 54th Parallel wrote: >  >> On Friday, 21 August 2020 at 16:58:48 UTC+8 54th Parallel wrote: >> I'm having the same issue with disposable firewalls built on >> debian-10-minimal, with the minimum amount of packages, on >> brand-spanking-new installations (plural)

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-22 Thread 54th Parallel
On Friday, 21 August 2020 at 16:58:48 UTC+8 54th Parallel wrote: > I'm having the same issue with disposable firewalls built on > debian-10-minimal, with the minimum amount of packages, on > brand-spanking-new installations (plural) being unreliable firewalls. They > sometimes function but not

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-08-21 Thread 54th Parallel
On Tuesday, 11 February 2020 at 00:56:07 UTC+8 awokd wrote: > > Systemctl in sys-firewall tells me qubes-firewall.service is "loaded > active running", if that helps. > > -- > - don't top post > Mailing list etiquette: > - trim quoted reply to only relevant portions > - when possible, copy

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-02-11 Thread Sven Semmler
On Mon, Feb 10, 2020 at 04:55:40PM +, 'awokd' via qubes-users wrote: > I had double-checked my debian-10-minimal firewall template against the > packages you installed and they matched, so I'm trying to think what > else is different. Maybe because you manually edited the rules? I've > seen

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-02-10 Thread 'awokd' via qubes-users
Sven Semmler: > On Sun, Feb 09, 2020 at 01:46:12PM +, 'awokd' via qubes-users wrote: >> Maybe it doesn't like the "disposable" part? Try it with a regular AppVM >> based on that same minimal template. > > I did: makes no difference. Also I've been running debian-based and > fedora-based

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-02-09 Thread Sven Semmler
On Sun, Feb 09, 2020 at 01:46:12PM +, 'awokd' via qubes-users wrote: > Maybe it doesn't like the "disposable" part? Try it with a regular AppVM > based on that same minimal template. I did: makes no difference. Also I've been running debian-based and fedora-based disposable sys-firewall for

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-02-09 Thread 'awokd' via qubes-users
Sven Semmler: > Hi, > > I created a sys-firewall based on debian-10-minimal: > > * qvm-clone debian-10-minimal deb-10-sys-firewall > * qvm-create --template deb-10-sys-firewall --label blue dvm-sys-firewall > * qvm-prefs dvm-sys-firewall template_for_dispvms True > * qvm-create --class DispVM

Re: [qubes-users] sys-firewall based on debian-10-minimal not recognized

2020-02-04 Thread Sven Semmler
On Tue, Feb 04, 2020 at 09:59:57AM -0600, Sven Semmler wrote: > As far as I can tell the firewall rules are enacted / the firewall does work. > So it's "just" Qubes Manager thinking it's not. How does it check? $ qvm-service sys-firewall qubes-firewall on clocksyncon