Re: [qubes-users] Re: Configuring AppVMs for multiple NICs?

[JW]

Thanks unman, this was very helpful!! I'm new to iptables, so perhaps a basic 
question: 

> > There are simple mechanisms to do this:
> > www.qubes-os.org/doc/firewall is helpful.
> > On sys-net you can use an entry in /rw/config/rc.local to set up the new
> > firewall restriction: something like
> > iptables -I FORWARD -s 10.137.100.10 -j DROP
> > iptables -I FORWARD -s 10.137.100.10 -d 10.0.0.0/8 -j ACCEPT

To recap, I'd like my "restricted" firewall (with IP 10.137.100.10) to grant 
access to  a 192.168.1.* network, and not allow any traffic to the second 
interface on a 10.* network. The "unrestricted" firewall would allow access to 
both networks. So in my sys-net, why don't I just do the following?

iptables -I FORWARD -s 10.137.100.10 -d 10.0.0.0/8 -j DROP

I ask because the above worked as expected, but when I tried: 

iptables -I FORWARD -s 10.137.100.10  -j DROP
iptables -I FORWARD -s 10.137.100.10 -d 192.0.0.0/8 -j ACCEPT

I could ping 192.168.1.1, but I could not browse the web on the restricted 
firewall.

Thank you, 

-J

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5154fda6-3ed4-4168-a76c-dda036e9c172%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Configuring AppVMs for multiple NICs?

[JW]

I have two physical NICs on my machine.  I'd like most AppVMs to only connect 
to one of the networks, but other VMs to connect to both. Is this possible? 

The NICs are attached to different networks (one 192.168.*, the other 10.*)

Thanks for any tips!

-J

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c049eab9-2bd9-49e9-a622-d3971014a865%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] MakeMKV on blu-ray drive?

[JW]

I'm new to Qubes, so apologies for the basic questions :)

Can I rip a blu-ray from an internal SATA drive by attaching it as a block 
device? Or would I need to put the reader on it's own SATA controller and 
attach that? 

Also, does it matter if the OS is a HVM vs PV?

Thanks!

-J

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d5aba0fe-780c-442d-b791-34d6dfba7224%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] ubuntu template

[JW]

Thank you very much! I've been fighting with Ubuntu install as well. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d4af28bd-1918-4336-8fd9-5883aa69f11f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.