On Fri, Jan 05, 2018 at 03:17:38PM +0000, 'Tom Zander' via qubes-users wrote:
> I'm trying to figure out how this works, and I am stuck.
> In every qube (except sys-net) there is  a resolv.conf that points to two 
> name servers.
> and .2
> This raises two questions;
> * how does sys-net handle these requests on this odd address. No 'ip ad' 
> network seems to listen on this address.
> * how can I change this in indidivual qubes in the correct matter.
> I have some qubes routing through sys-vpn and I adjusted the vpn VM to find 
> the DNS, but users of the vpn can't find any DNS service now.
> Any help appreciated.

Hi Tom,

You don't say which Qubes version you're using, or how the sys-vpn is
Look at the nat table in the upstream netvm.
You'll see that sys-net NATs these requests to the NS used by sys-net.

You should be able to change name servers in a qube using bind-dirs on
/etc/resolv.conf. Or, (somewhat better since it allows you to switch
qubes in and out of vpn), just change the NAT rules on sys-vpn to
capture DNS traffic and send it down the tunnel.


You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to