use /etc/whonix_firewall.d/32_qubes rather than /etc/whonix_firewall.d/30_default

[phabricator-migrator]

Information

ID: 163
PHID: PHID-TASK-ufr5r4md7rwavxynq2s5
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

Use /etc/whonix_firewall.d/32_qubes rather than /etc/whonix_firewall.d/30_default. Otherwise users run into an dpkg interactive conflict resolution dialog next time Whonix is upgraded.

/etc/whonix_firewall.d is a .d Style Configuration Folder. So you can just drop your snippet and overrule existing settings.

Comments

---

nrgaway

2015-02-15 10:42:55 UTC

/etc/whonix_firewall.d/30_default was identified by you as one of the configurations files that needed it IP address changed. The only change is to update the IP address to those of Qubes.

Should a complete copy of 40_qubes be written to 30_default and will that completely override 40_qubes?

---

Patrick

2015-02-15 11:02:54 UTC

Don’t write to 30_default at all (or dpkg interactive conflict resolution dialog will pop up on update).

A complete copy is neither useful nor required.

Let’s say for example 30_default contains CONTROL_PORT_FILTER_PROXY_ENABLE=1 and you dislike that setting. Then just create a file 40_something and the only code relevant line would be CONTROL_PORT_FILTER_PROXY_ENABLE=0. That’s it. (Additional stuff: license header, comments for explanation.)

Then the CONTROL_PORT_FILTER_PROXY_ENABLE setting from 30_ default would never be used. Only the one from 40_something.

So just set the IP variable you want to override in the config file with the higher (lexical) name.

(I am not sure if 32_ or 40_ is best. Whonix Forum)

---

nrgaway

2015-02-16 07:51:56 UTC

Removed /etc/whonix_firewall.d/30_default from the replace-ips scripts since all the IP addresses within 30_default are commented out which resolves the issue of modifying the file to begin with.

[[ Don't need to replace IPs in /etc/whonix_firewall.d/30_default since … · nrgaway/qubes-whonix@f2678cf · GitHub | Don't need to replace IPs in /etc/whonix_firewall.d/30_default since … · nrgaway/qubes-whonix@f2678cf · GitHub ]]