On Jun 12, 2017, Andrew Morgan wrote: > Did you follow the "Set up a ProxyVM as a VPN gateway using iptables and > CLI scripts" section of the Qubes VPN docs > (https://www.qubes-os.org/doc/vpn/ <https://www.qubes-os.org/doc/vpn/> )? > > If so you should be good just to execute the `/rw/config/rc.local` file > on your VPN VM after every suspend either manually, through a keyboard > shortcut (which I do personally with the following command): > > qvm-run -i root sys-vpn "/rw/config/rc.local"
I followed the "Set up a ProxyVM as a VPN gateway using iptables and CLI scripts" instructions but for me executing "/rw/config/rc.local" doesn't make it work again. I've also tried commenting out or deleting "persist tun" from my OpenVPN config file, as Chris Laprise as suggested in the thread "is vpn made manually, not supposed to restart after suspend?" on May 21 but that isn't helping either. My current workaround is a script I wrote in dom0 that first does "qvm-prefs VMname -s netvm none" for all the VMs I normally have running that use sys-vpn (my ProxyVM VPN gateway), then shuts sys-vpn down, waits 10 seconds, starts sys-vpn, then does "qvm-prefs VMname -s netvm sys-vpn" for all those VMs. Any ideas what could be going on so that neither executing /rw/config/rc.local nor commenting out "persist tun" works in my case? Thanks! Michael Siepmann -- Michael Siepmann, Ph.D. *The Tech Design Psychologist*™ /Shaping technology to help people flourish/™ 303-835-0501 TechDesignPsych.com <http://www.TechDesignPsych.com?id=esig> OpenPGP: 6D65A4F7 <http://pool.sks-keyservers.net/pks/lookup?search=0x6D65A4F7&fingerprint=on&hash=on&op=vindex> -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8829c4c7-3d0e-267d-e384-00e4b495301e%40TechDesignPsych.com. For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: OpenPGP digital signature
