Re: [qubes-users] DNS propagation in Qubes

[gasull]

Is there a clear guide of how to set up a DNS VM in Qubes OS?

I tried setting up dnsmasq in the VPN VM behind sys-firewall, both with 
NetworkManager and as a standalone service.  It didn't work.  I also tried 
on another VM behind the VPN VM.  

All I got working is making DNS requests to the specific VM.  E.g. 

$ dig example.com @10.137.0.23

But I wasn't able to hijack the DNS requests with iptables for general 
requests without "@".  tcpdump seems to indicate that the DNS queries don't 
even get routed through the VPN VM, which doesn't make sense to me, so I 
might be missing something.

Any clear step-by-step guide anywhere?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/984347f8-29f0-4436-860a-7dd7fba4237c%40googlegroups.com.

[qubes-users] Unable to update debian-9 templace VM

[grv]

I keep getting highlighted error when trying to update any of my debina-9 
based templates. As per this post 
, 
this seem to be issue with debian.org itself. Is there a way to get around 
this?

Ign:9 https://ftp.debian.org/debian stretch-backports/main amd64 Packages
Ign:10 https://ftp.debian.org/debian stretch-backports/main all Packages
Ign:11 https://ftp.debian.org/debian stretch-backports/main Translation-en
Ign:12 https://ftp.debian.org/debian stretch-backports/main 
Translation-en_US
Err:9 https://ftp.debian.org/debian stretch-backports/main amd64 Packages
  SSL: certificate subject name (www.debian.org) does not match target host 
name 'ftp.debian.org'
Ign:10 https://ftp.debian.org/debian stretch-backports/main all Packages
Ign:11 https://ftp.debian.org/debian stretch-backports/main Translation-en
Ign:12 https://ftp.debian.org/debian stretch-backports/main 
Translation-en_US
Reading package lists... Done
W: The repository 'https://ftp.debian.org/debian stretch-backports Release' 
does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore 
potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration 
details.
E: Failed to fetch 
https://ftp.debian.org/debian/dists/stretch-backports/main/binary-amd64/Packages
  
SSL: certificate subject name (www.debian.org) does not match target host 
name 'ftp.debian.org'
E: Some index files failed to download. They have been ignored, or old ones 
used instead.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5516f1ed-17fb-4008-8ca6-6abe0ef90474%40googlegroups.com.