-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, Mar 26, 2025 at 06:04:40AM +0000, Qubes OS Development Mailing List wrote: > > I've suggested you propose a change in the documentation to reflect what > > you see as an issue. Will you do that? > > I have updated the entire guide which I will share soon. > > Leaving this as a community guide is really not the way this should be done. > Any number of changes made by Qubes could break the firewall and cause leaks. > > Can someone at Qubes confirm whether it is safer to rely on "eth0" or ifgroup > 1 for referring to the upstream interface. Are these expected to remain > stable forever?
Please use ifgroup 1. > Another issue I've discovered with qubes-firewall.service is that it will > succeed even if the user firewall script fails. If this is something you will > change then the guide I will submit will use qubes-firewall.service, > otherwise I will have to create a new service that detects failures which > makes the guide even more difficult for non-technical users to use. Please submit a PR. - -- Sincerely, Demi Marie Obenour (she/her/hers) Invisible Things Lab -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEopQtqVJW1aeuo9/sszaHOrMp8lMFAmfktaMACgkQszaHOrMp 8lN8phAAmW+lCw1tC+v+FCCyjIi7vzdJXFuAjxSNXtNtKqB8DK5BpHG36p0BaLVR 494bvoaeq0SvG18wNaOw2+CqnDXmwRg0BdHwpICmPlFZQ24qGJ6JlKAqAeJ+SylU gAzhMS1iyQ1ouyr83dOVXvvenev3JZiHJbtsTaNaX7+WZnIMwr1kdA1pZqaDqZ+p PGfh6ZROHj1mRy3nTZWf3nmv2XEqsTQuj+S5p8+YtXuujQllaYA/4TDE+YSUxJg9 3NSAmDGw6DAVea/Q2u2OGdAyaVqcMX4mX0uh810QVi54Fn6O3K+hiBnD/RK1xv0Z tjoCa+C2IKaLnzuLPpbgGJ5uksCQ8/PxFvlaGtdPmljwi7TcnrcckxeE1MJ0gmg0 XbPdMdiOsf6xovvJzlkpiad5Y8sA03c9Hb7dJtA0IADyy/TR7eDmOJy+hKg73LYb EXH8sqUB5biKqRhbqLIN+v+eSzZWhLUrdCHTXDoKX9oizb7TOsVyRUKjqry9jqHt gLPBi5cyRPkmkT+8OVz+KdAfRnwwPVJ6ypJWg7vKmJHKca0Z63xrIavL4xu24sgW OMtbO0YY+UkmFHZAryL+7cLGH7TZlBu1ZtuAHJRimyZiksrjSFh5ldCyJG1t4PkQ OeUXTS7KY44hLCnp3oB7BnDZMk9/SfSLQON0594s8Pz3ddnq0X0= =syTI -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/qubes-devel/Z-S1qAmd8lV0tv-X%40itl-email.
