Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-30 Thread Unman
On Wed, Mar 29, 2017 at 06:02:17AM -0700, Nemo wrote: > > > > You can add the rule like this: > > 'sudo iptables -I INPUT -p tcp --dport 8082 -j ACCEPT' > > > > '-I INPUT' Inserts the rule at the top of the INPUT chain (You can > > specify a number here, like '-I INPUT 2' to specify position.) >

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-29 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/28/2017 02:14 PM, Nemo wrote: > Doing updates through the VPN would be perfect if possible. For this you can simply skip the updates proxy, and let your template access the same networks as you appVMs. You just have to edit the

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Unman
On Tue, Mar 28, 2017 at 05:24:00PM -0700, Nemo wrote: > > > > To help me understand how qubes-updates-proxy is working, is this more or > > less accurate?: > > > > The proxy gives the TemplateVM's network connection permission to break > > through it's own firewall's "Deny All" setting, for

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Nemo
On Tuesday, March 28, 2017 at 8:07:30 PM UTC-4, Nemo wrote: > On Tuesday, March 28, 2017 at 7:34:45 PM UTC-4, Unman wrote: > > On Tue, Mar 28, 2017 at 03:23:26PM -0700, Nemo wrote: > > > On Tuesday, March 28, 2017 at 12:27:52 PM UTC-4, Nemo wrote: > > > > I'm really having a lot of trouble getting

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Nemo
On Tuesday, March 28, 2017 at 7:34:45 PM UTC-4, Unman wrote: > On Tue, Mar 28, 2017 at 03:23:26PM -0700, Nemo wrote: > > On Tuesday, March 28, 2017 at 12:27:52 PM UTC-4, Nemo wrote: > > > I'm really having a lot of trouble getting consistent results with the > > > updates proxy. I've managed to

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Unman
On Tue, Mar 28, 2017 at 03:23:26PM -0700, Nemo wrote: > On Tuesday, March 28, 2017 at 12:27:52 PM UTC-4, Nemo wrote: > > I'm really having a lot of trouble getting consistent results with the > > updates proxy. I've managed to break it on Firewall as well, despite only > > removing and then

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Chris Laprise
On 03/28/2017 12:27 PM, Nemo wrote: I'm really having a lot of trouble getting consistent results with the updates proxy. I've managed to break it on Firewall as well, despite only removing and then re-adding qubes-updates-proxy (as far as I can tell). Could you please help me by listing the

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Nemo
On Tuesday, March 28, 2017 at 12:27:52 PM UTC-4, Nemo wrote: > I'm really having a lot of trouble getting consistent results with the > updates proxy. I've managed to break it on Firewall as well, despite only > removing and then re-adding qubes-updates-proxy (as far as I can tell). > > >

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Nemo
I'm really having a lot of trouble getting consistent results with the updates proxy. I've managed to break it on Firewall as well, despite only removing and then re-adding qubes-updates-proxy (as far as I can tell). Could you please help me by listing the elements required for it to work? Eg *

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Chris Laprise
On 03/28/2017 08:14 AM, Nemo wrote: Yes, I did follow the official documentation to create the proxy. The only thing I've borrowed from the Rudd-O version is having Firewall downstream from VPN, and setting the VPN's firewall settings to block all traffic except that on my VPN's port. Doing

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Nemo
Yes, I did follow the official documentation to create the proxy. The only thing I've borrowed from the Rudd-O version is having Firewall downstream from VPN, and setting the VPN's firewall settings to block all traffic except that on my VPN's port. Doing updates through the VPN would be perfect

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-28 Thread Chris Laprise
On 03/28/2017 04:33 AM, Nemo wrote: On Tuesday, March 28, 2017 at 4:32:12 AM UTC-4, Nemo wrote: I have a set of chained VMs set up like this Net <- Firewall <- VPN <- Firewall-VPN <- TemplateVMs/AppVMs While my AppVMs have perfect internet connection, I cannot get the Updates Proxy to work