On 08/18/2018 09:47 PM, Stumpy wrote:
On 2018-08-18 22:30, Chris Laprise wrote:
On 08/18/2018 12:39 PM, Stumpy wrote:
I am able to ping via the vpn vm but when I try to connect to the net
with an appvm that is using the vpn vm I cant connect to anything. Im
using v4.0 and the script method, not the netmanager method. I have
double checked all the config files that I created and as far as I
can tell they are right. I havent been able to connect using this vpn
vm so its not a case of was working before. Is there a log or
something I can post to help diagnose this issue?
Thanks
To see log messages, you can test the client as suggested in Step 2.
It may help to use ping in the appvm, first with a known IP address
and then with a domain name (this tests basic connection and DNS).
-
If you think you might have made a mistake with the scripts, I created
a streamlined alternative with no file editing that is being
considered for inclusion in Qubes:
https://github.com/tasket/qubes-tunnel
The process is to run the installer as shown in the Readme, then run
qtunnel-setup and add your VPN config to the qtunnel directory. Full
instructions:
https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service
Thanks for that, I checked the iptables, and tried pinging startpage.com
and it seemed to go well enough but then again I am not wholly sure
about that. I posted the output here: https://pastebin.com/3bZwKr3k
The way you created, does that also have the "fail closed" feature?
Have you tried pinging an IP address from a connected appvm (not vpn vm)
like this:
ping 216.218.239.22
If that works but not "ping startpage.com" then there is a DNS handling
issue.
I wrote those script instructions long ago, then decided people needed
something easier and more robust. The new code at qubes-tunnel has all
of the fail closed features, too.
--
Chris Laprise, [email protected]
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/eb37b3ed-6630-01fd-7da8-c366d8906f34%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
