On 7/17/20 7:42 PM, Zrubi wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 2020-06-23 12:57, 'Jonas' via qubes-devel wrote:
Why are No Network introduction system preinstalled.

And why are No Firewall Messages to allow outgoing and ingoing
Network Firewall Message popuped Like in opensnitch
I have already made a PoC about this:
http://zrubi.hu/en/2017/traffic-analysis-qubes/

Why it is not a default?
Probably because:
- - it is not trivial to setup the intrusion rules,
- - it may provides an additional attack surface,
- - it is surely not needed for everyone ;)


I think suricata would be the better choice here....



Regards:
- -- Zrubi
-----BEGIN PGP SIGNATURE-----
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=sQDu
-----END PGP SIGNATURE-----


--
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/984d7bec-1274-64e8-bf9a-3f38c10d4a43%40gmail.com.

Reply via email to