Apologies for the reply to self, but I have received great news. The first piece of great news is that a user of Qubes VPN found a bug that made it impossible for Qubes VPN to work with tun-style VPN providers. We have fixed that bug thanks to his cooperation, and you can see the result of our bug report and conversation here:
https://www.reddit.com/r/Qubes/comments/57acz8/add_a_leakproof_vpn_to_your_qubes_os_with_this/ The second piece of great news is that, based on what he reported there, ABSOLUTELY NO TRAFFIC ever leaked from his VPN-protected AppVM to any sort of network device, as the VPN VM still prevented the traffic from going anywhere else except over the VPN. That means: even under an environment where a critical bug rendered VPN operation impossible, Qubes VPN still managed to prevent leaks 100%. I am quite happy to see that the engineering gone into this thing actually paid off big time. Have you tried Qubes VPN yet? -- Rudd-O http://rudd-o.com/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to email@example.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/667e45a5-0278-ca7a-0cd4-3bc0101ff045%40rudd-o.com. For more options, visit https://groups.google.com/d/optout.