[qubes-users] qvm-firewall command error

Mailing Lists qubes-users
1

Currently, I am configuring my NetworkIT qube firewall with the qvm-firewall command in dom0 terminal. However, when I entered this, it showed this following error:

[Howard@dom0 ~]$ qvm-firewall NetworkIT add dsthost 10.137.0.5
Traceback (most recent call last):
File “/usr/bin/qvm-firewall”, line 5, in
sys.exit(main())
File “/usr/lib/python3.8/site-packages/qubesadmin/tools/qvm_firewall.py”, line 198, in main
args = parser.parse_args(args, app=app)
File “/usr/lib/python3.8/site-packages/qubesadmin/tools/init.py”, line 385, in parse_args
namespace = super().parse_args(*args, **kwargs)
File “/usr/lib64/python3.8/argparse.py”, line 1768, in parse_args
args, argv = self.parse_known_args(args, namespace)
File “/usr/lib64/python3.8/argparse.py”, line 1800, in parse_known_args
namespace, args = self._parse_known_args(args, namespace)
File “/usr/lib64/python3.8/argparse.py”, line 2009, in _parse_known_args
stop_index = consume_positionals(start_index)
File “/usr/lib64/python3.8/argparse.py”, line 1965, in consume_positionals
take_action(action, args)
File “/usr/lib64/python3.8/argparse.py”, line 1874, in take_action
action(self, namespace, argument_values, option_string)
File “/usr/lib64/python3.8/argparse.py”, line 1159, in call
subnamespace, arg_strings = parser.parse_known_args(arg_strings, None)
File “/usr/lib64/python3.8/argparse.py”, line 1800, in parse_known_args
namespace, args = self._parse_known_args(args, namespace)
File “/usr/lib64/python3.8/argparse.py”, line 2009, in _parse_known_args
stop_index = consume_positionals(start_index)
File “/usr/lib64/python3.8/argparse.py”, line 1965, in consume_positionals
take_action(action, args)
File “/usr/lib64/python3.8/argparse.py”, line 1874, in take_action
action(self, namespace, argument_values, option_string)
File “/usr/lib/python3.8/site-packages/qubesadmin/tools/qvm_firewall.py”, line 78, in call
rule = qubesadmin.firewall.Rule(None, **kwargs)
File “/usr/lib/python3.8/site-packages/qubesadmin/firewall.py”, line 280, in init
setattr(self, rule_opt, value)
File “/usr/lib/python3.8/site-packages/qubesadmin/firewall.py”, line 297, in action
value = Action(value)
File “/usr/lib/python3.8/site-packages/qubesadmin/firewall.py”, line 62, in init
raise ValueError(value)
ValueError: dsthost

Can someone figure out what’s going on with the code?

2

<snip>

You havent given a valid rule: parameters are wrong and no action given.
Look at the manpage and qvm-firewall --help.

qvm-firewall NetworkIT add accept 10.137.0.5
OR
qvm-firewall NetworkIT add accept match dsthost=10.137.0.5/32

3

Thanks