On Mon, Apr 24, 2017 at 11:33:58AM -0700, [email protected] wrote: > On Sunday, April 23, 2017 at 6:20:33 PM UTC-4, Chris Laprise wrote: > > On 04/23/2017 05:50 PM, wrote: > > > Would you mind to share these files with me from your Debian 8 template > > > to see if I can fin what the problem is?! > > > > > > Unman, no I haven't enabled anything. I got a Debian 8 template, almost > > > clean, and then a bunch of AppVMs using it as a template. > > > > > > Cheers. > > > > > > > It turns out those two scripts I mentioned were not changed in the > > latest update (although qubes-setup-dnat-to-ns was changed slightly in a > > way that should have no bearing here). > > > > It appears that qubes-ns is not normally created in an appVM, anyway. > > Running 'setup-ip' and 'qubes-setup-dnat-to-ns' from a shell gives me > > the same errors you posted. > > > > Perhaps the cause is simpler: You may have inadvertently set the netVM > > for that appVM to 'none' or enabled blocking in the firewall settings. > > > > -- > > > > Chris Laprise, [email protected] > > https://twitter.com/ttaskett > > PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 > > Hi, > > The thing is that when I set up the DNS servers manually by modifying the > /etc/hosts file to let's say 8.8.8.8, everything works properly! I think the > problem is that for some reason the iptables rules are not being created, so > the appVM can't connect. > > Cheers. >
It's still not entirely clear to me what's going on. I assume that you are changing /etc/resolv.conf rather than hosts - if the latter , what entry are you putting in there? And you are doing this in the appVM. But the iptables rules arent being created in the netvm to which the appVM is connected. Are you able to use DNS from the netVM? What is in resolv.conf there and what is in iptables upstream? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20170424200605.GA24940%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
