"Firewall" VM

[marmarek]

Reported by joanna on 27 Jul 2010 14:15 UTC

• Make sure the user doesn't accidentally use a sensitive VM from less-sensitive task (e.g. the user might want to be able to whitelist the "banking" VM to only be able to connect to the bank HTTPS server)
• Prevent VM leaks

Features:

• TCP/IP-based filtering
• HTTPS-level filtering (e.g. allow connection only to HTTPS servers with specific SSL certificate!)
• GUI for user configuration

Migrated-From: https://wiki.qubes-os.org/ticket/63

[marmarek]

Modified by joanna on 13 Oct 2010 10:10 UTC

[marmarek]

Modified by joanna on 13 Oct 2010 10:10 UTC

[marmarek]

Modified by smoku on 14 Mar 2011 19:26 UTC

[marmarek]

Modified by smoku on 14 Mar 2011 19:26 UTC

[marmarek]

Comment by smoku on 14 Mar 2011 19:28 UTC
Implemented in http://git.qubes-os.org/?p=smoku/qubes-manager;a=commit;h=3684fd4002627b727d8d5c390b584f417845d01a and http://git.qubes-os.org/?p=smoku/core;a=commit;h=e2d52a27e810522c41720bb17b1f4f52f1fe2e6a

[marmarek]

Comment by smoku on 14 Mar 2011 19:28 UTC
Implemented in http://git.qubes-os.org/?p=smoku/qubes-manager;a=commit;h=3684fd4002627b727d8d5c390b584f417845d01a and http://git.qubes-os.org/?p=smoku/core;a=commit;h=e2d52a27e810522c41720bb17b1f4f52f1fe2e6a