I can't reply to my previous post on the mailing list. I've updated the VPN guide.
https://forum.qubes-os.org/t/configuring-a-proxyvm-vpn-gateway/19061/58 These rules need to be reviewed by somebody at Qubes. > iifgroup 1 drop > oifgroup 1 drop > in a forward rule. This is not enough. There is a reroute check after the forward hook and the tunnel could break in the time between the forward hook and the reroute check. I've considered this in my updated rules. > Instead of requiring users to write custom scripts, it would be much > better to allow users to configure a qube as a VPN qube in the GUI, and > for Qubes OS to set up these rules automatically. This would be much better. There needs to be something official for this because there are too many bad guides on the forums. -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/qubes-devel/kotWbS9ZY4U887zp95PSs1UfnWCAlprEn9t_iCAQ06pvicpuEU8ldASCj965CzqK40nQRWiRhQx0qD9X4Hm45HMjxibKJv7ovQkXILcZC9M%3D%40proton.me.