On 07/18/2017 06:02 PM, Gaiko wrote:
> On Tuesday, July 18, 2017 at 11:27:00 AM UTC-4, Chris Laprise wrote:
>> On 07/17/2017 07:37 PM, Gaiko wrote:
>>> On Sunday, July 16, 2017 at 9:41:53 PM UTC-4, Chris Laprise wrote:
>>>> On 07/16/2017 09:23 PM, Gaiko Kyofusho wrote:
>>>>
>>>>> Sun Jul 16 21:16:22 2017 us=614593 RESOLVE: Cannot resolve host address:
>>>>> vpnprovidermod'dname.com <http://dname.com/>: No address associated with
>>>>> hostname
>>
>> Did you put any restrictions on your sys-firewall? Attaching the VPN 
>> directly to sys-net is usually sufficient.
>>
>> Also, you could try removing internal firewall output restriction with:
>> sudo iptables -P OUTPUT ACCEPT
>>
>> then run openvpn again.
>>
>> -- 
>>
>> Chris Laprise, tas...@openmailbox.org
>> https://twitter.com/ttaskett
>> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886
> 
> So it is safe to connect my vpn directly to sys-net? (I didn't realize that).

Its generally as safe as the VPN service provider you're using -- they
should use certificate validation config like 'remote-cert-tls' as most do.


> 
> Well, that (hopefully) narrows things down a bit more... kinda. the VpnVM 
> works if I just connect it directly to the sys-netvm, though before, places 
> other than my new home setup I was usually able to connect to the net with 
> the appvm->vpn->firewallvm->sys-netvm setup no problem, its a mystery why it 
> would work most other places but not with this ISP (or modem perhaps).
> 


-- 

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4c7b7d72-9e7d-9b65-0e14-1327eff2750d%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to