Re: [qubes-users] MAC Address Anonymization and NetworkManager Compatibility

2020-02-28 Thread 'sf0IqXUyNLTP22nB3Lpt' via qubes-users
Sent with [ProtonMail](https://protonmail.com) Secure Email.

‐‐‐ Original Message ‐‐‐
On Thursday, February 27, 2020 12:09 PM, 799  wrote:

> Hello sf0IqXUyNLTP22nB3Lpt,
>
> ''sf0IqXUyNLTP22nB3Lpt via qubes-users  schrieb 
> am Mi., 26. Feb. 2020, 07:12:
>
>> I have recently set up a vpn gateway qube according to the instructions as 
>> listed [here](https://www.qubes-os.org/doc/vpn/). I have now gone to set up 
>> the MAC Anonymization and have a question and a problem both.
>> Firstly the linked page wrote specifically not to include the network 
>> manager. But at the same time the page on anonymizing the MAC address says 
>> that you must begin by installing the network manager. Is this safe to do?
>
> you can build a VPN Gateway without using network manager afaik.
> You might want to look into my setup notes on GitHub how I've set it up:
>
>>>How to use a ProxyVM to run all traffix through PIA<<
> https://github.com/one7two99/my-qubes/blob/master/my-qubes-templates/27%20template-vpn-vms.md
>
> https://github.com/one7two99/my-qubes/blob/master/my-qubes-templates/20%20template-sys-vms.md
>
> Amazing name by the way ;-)

lol thanks. It's a traditional family name for many generations in my family. I 
assume yours is the same ;)

> One7two99

Thanks for your help! This script is very interesting. What I want to ask is 
how the tasket script compares to the setup with cli and iptables in the [qubes 
vpn documentation](https://www.qubes-os.org/doc/vpn/). I tried to do the tasket 
but because I had trouble I did the cli and iptables instead. If tasket is 
better, surely I will use your script.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/TNVcAAL7C-6YeIf0AgPbZnNqUjHNwZG8rL_rO5pRe--YXlwvC2yF7vS8tgqhCh5iE025DrnYOza4JWxsqKVImPdBY8rLLkhyYDCBHBwLymA%3D%40protonmail.com.


Re: [qubes-users] MAC Address Anonymization and NetworkManager Compatibility

2020-02-26 Thread 'sf0IqXUyNLTP22nB3Lpt' via qubes-users
Thanks to you both. I was mistaken in thinking I needed to set up MAC 
anonymizing in all NetVMs, but it seems like just the sys-net one is needed.

And for some reason I kept reading 1.16 as 1.1.6. Which was dumb of me but led 
to my confusion.

Thanks again for your help!


Sent with ProtonMail Secure Email.

‐‐‐ Original Message ‐‐‐
On Wednesday, February 26, 2020 6:36 AM, Chris Laprise  
wrote:

> On 2/26/20 1:12 AM, 'sf0IqXUyNLTP22nB3Lpt' via qubes-users wrote:
>
> > I have recently set up a vpn gateway qube according to the instructions
> > as listed here https://www.qubes-os.org/doc/vpn/. I have now gone to
> > set up the MAC Anonymization and have a question and a problem both.
> > Firstly the linked page wrote specifically not to include the network
> > manager. But at the same time the page on anonymizing the MAC address
> > says that you must begin by installing the network manager. Is this safe
> > to do?
>
> There are two main setup options in that VPN doc: The first one tells
> you to enable Network Manager in the VPN VM. The second one is
> script-based and tells you not to enable NM in the VPN VM.
>
> The "don't include NM" part refers only to setting up the VPN VM, which
> is separate from sys-net. In other words, the VPN instructions don't
> affect sys-net, so you can keep using NM (in sys-net) after you setup
> your VPN.
>
> > The second is that I only have NetworkManager 1.16.4. When I try to
> > update or reinstall with sudo dnf install NetworkManager I get
> > '
> > Last metadata expiration check: 0:21:07 ago on Wed Feb 26 00:45:32 2020.
> > Package NetworkManager-1:1.16.4-1.fc30.x86_64 is already installed.
> > Dependencies resolved.
> > Nothing to do.
> > Complete!
>
> Nothing wrong there. 1.16 is a much later version than the minimum 1.4.2
> listed in the doc.
>
> --
>
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/oEAwwDpxOv26iGX0xsiUXm4krgP4K1mimVNzbfr13bzx40pL5vW8FBMB1rsCxaiW3aul1qIa_lJ_PMGCc116UuDj5uEgh9fPCwvuXcKkOHA%3D%40protonmail.com.


[qubes-users] MAC Address Anonymization and NetworkManager Compatibility

2020-02-25 Thread 'sf0IqXUyNLTP22nB3Lpt' via qubes-users
I have recently set up a vpn gateway qube according to the instructions as 
listed [here](https://www.qubes-os.org/doc/vpn/). I have now gone to set up the 
MAC Anonymization and have a question and a problem both.

Firstly the linked page wrote specifically not to include the network manager. 
But at the same time the page on anonymizing the MAC address says that you must 
begin by installing the network manager. Is this safe to do?

The second is that I only have NetworkManager 1.16.4. When I try to update or 
reinstall with sudo dnf install NetworkManager I get
'
Last metadata expiration check: 0:21:07 ago on Wed Feb 26 00:45:32 2020.
Package NetworkManager-1:1.16.4-1.fc30.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
'

Thank you for your kind assistance

Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ibPYNGWEv90dXdfeROkX00B--c2ixTdnPv-AYDI4kIR2ohxCLwvZ4kK8LiUhEI_A3oHNfSCrtMWaDtfFuPcErBCqb8b0Hrkz0E6S00F9Xn0%3D%40protonmail.com.