[qubes-users] Re: Unable to get right X display for kali on HVM

2017-01-10 Thread matty . south
On Monday, August 1, 2016 at 8:58:56 AM UTC-5, NewbieG wrote:
> Hello list,
> 
> I'm running Qubes OS 3.1 and I'm trying to have a Kali VM (2016.1).
> 
> I've tried both methods suggested in:
> 
> https://www.qubes-os.org/doc/pentesting/kali/
> 
> First one, works ok if you run kali from DVD without installing it. If I try 
> to install it, login window flickers and once logged on, the desktop shows up 
> 'misplaced' (see attach).
> 
> Second one, as someone already pointed out in the list, introduces conflicts 
> between X packages from kali and X packages from the debian-9 template.
> 
> Any help would be most appreciated.
> 
> Thanks!

Same issue here. I had good luck using the "Mate" version of Kali for my HVM. 
This indicates it is probably an issue with default gnome in kali? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3b9acf33-63db-4b3d-9d21-f8a08de88ab3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] GPU is deal-breaker

2017-08-22 Thread Matty South
On Tuesday, August 22, 2017 at 4:10:57 AM UTC-5, cdga...@gmail.com wrote:
> > > Summary: Deal-breaker probably is down to getting VLC working
> > > properly
> > >
> >
> > did you tried to switch video output?
> > I would start with X11 instead of automatic.
> >
> 
> Not sure what you mean, but have other pressing projects to work on right 
> now. Will look into it further in the future when I have the time available.
> 
> As per above, VLC is a make or break for me - but others (eg: gamers) would 
> benefit from detaching GPU from Dom0 and attaching GPU to their games domain 
> qube, if it meant that OpenGL could then be available to the attached qube

When you have more time to look into this again, looks like this guy was able 
to pass his GPU through to his Windows HVM: 
https://www.reddit.com/r/Qubes/comments/66wk4q/gpu_passthrough/ 

Might be an option for you. You could Skype/VLC in your Windows VM. I use my 
WinVM do to Sharepoint and MS Office stuff and it works pretty well. Good luck!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e099f4be-7310-4553-88cf-c536774fbdac%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Occasionally UI elements stop responding to mouse clicks (all AppVMs and dom0)

2017-05-26 Thread Matty South
I have a T460. I'll try to experiment a more when it happens to narrow down 
what the cause is. It is very intermittent for me (happens like once a week or 
something).


On Thursday, May 25, 2017 at 2:14:32 PM UTC-5, Vadim Kotov wrote:
> Nope, just the laptop screen.
> 
> 
> On May 25, 2017 5:49 AM, "Matty South" <matty...@gmail.com> wrote:
> 
> On Wednesday, May 24, 2017 at 8:54:22 PM UTC-5, koto...@gmail.com wrote:
> 
> > Hey guys,
> 
> >
> 
> > I have a rather peculiar issue. Sometimes all the UI elements stop 
> > responding to mouse clicks (or touch pad for that matter). This includes 
> > all AppVMs and dom0. E.g. I can't switch tabs in the browser or tabs in 
> > terminal emulators or just select or move windows with the mouse. I still 
> > can do all of that using keyboard, alt+tab switches between windows just 
> > fine, ctrl+pageup/pagedown switches between terminal/browser tabs, commands 
> > in bash can be executed and typed in.
> 
> >
> 
> > It starts responding to clicks again after anywhere between 1 and 5 minutes.
> 
> > This happens between one and five times a day.
> 
> >
> 
> > Could someone please point me to how do I debug this issue?
> 
> >
> 
> > Thanks!
> 
> >
> 
> > PS
> 
> > I use Qubes as my primary OS and usually have two, rarely three or four 
> > AppVMs working at the same time. I am mindful of the memory usage and am 
> > sure that it stays well within available memory. I use Lenovo ThinkPad T450 
> > with 16G of RAM of which most of the time I only use < 50%.
> 
> 
> 
> I sometimes a have similar bug. I have a suspicion it's due to the way the 
> desktop is extended for multiple monitors. Do you also have multiple 
> monitors? [trying to narrow down the root cause]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5be503c3-e923-487b-9212-f8a581d38490%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Suitability for an application testing scenario

2017-05-22 Thread Matty South
On Sunday, May 21, 2017 at 1:02:52 AM UTC-5, David Seaward wrote:
> Hi,
> 
> Previously I've used type II VMs like VirtualBox for application
> testing: install application on the base OS, test features (including
> GUI features, shell integration and system integration), discard
> changes. Additional steps might include: pause/resume the VM, save
> different states of the VM.
> 
> Are Qubes OS VMs suitable for the same purpose? Specifically, is it
> possible to switch from a dom0 view to a VM-only view, rather than VM
> windows appearing in dom0?
> 
> Regards,
> David
> 
> P.S. If this is possible, Qubes OS also seems like a more flexible
> alternative to dual-booting?

Great question, David. I would say if testing could be done in Xen, then it 
could likely be done in Qubes. It's really difficult to mess with dom0 or how 
it looks, so I doubt you will have luck switching views. What guest OS will you 
mainly use for testing?  One option may be, if you're accustomed to Virtualbox 
for Windows for example, setting up a Windows VM how you like it for testing 
and loading a guests in there. I can't comment on the performance of Virtualbox 
inside of a VM though. Has anyone else done this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/64062cda-25cd-4617-8acb-b09d700ece75%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Occasionally UI elements stop responding to mouse clicks (all AppVMs and dom0)

2017-05-25 Thread Matty South
On Wednesday, May 24, 2017 at 8:54:22 PM UTC-5, koto...@gmail.com wrote:
> Hey guys,
> 
> I have a rather peculiar issue. Sometimes all the UI elements stop responding 
> to mouse clicks (or touch pad for that matter). This includes all AppVMs and 
> dom0. E.g. I can't switch tabs in the browser or tabs in terminal emulators 
> or just select or move windows with the mouse. I still can do all of that 
> using keyboard, alt+tab switches between windows just fine, 
> ctrl+pageup/pagedown switches between terminal/browser tabs, commands in bash 
> can be executed and typed in.
> 
> It starts responding to clicks again after anywhere between 1 and 5 minutes.
> This happens between one and five times a day.
> 
> Could someone please point me to how do I debug this issue?
> 
> Thanks!
> 
> PS
> I use Qubes as my primary OS and usually have two, rarely three or four 
> AppVMs working at the same time. I am mindful of the memory usage and am sure 
> that it stays well within available memory. I use Lenovo ThinkPad T450 with 
> 16G of RAM of which most of the time I only use < 50%.

I sometimes a have similar bug. I have a suspicion it's due to the way the 
desktop is extended for multiple monitors. Do you also have multiple monitors? 
[trying to narrow down the root cause]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9e507ab-cc0a-4980-b200-265d7300f601%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: have to repeatedly click to files from start menu

2017-06-01 Thread Matty South
On Wednesday, May 31, 2017 at 11:35:47 PM UTC-5, cooloutac wrote:
> as the title says, to launch start manager in xfce, although I believe I have 
> had this issue for a real long time, i think multiple qubes versions.  seen 
> some people talking about it on irc thought I'd bring it up again.   doesn't 
> seem to matter if its fedora or debian.  Sometimes randomly i click files and 
> nothing happens.
> 
> I think its a known issue but not sure.

I can corroborate. I have the same issue. Usually takes two clicks to start the 
file browser. Sometimes takes three or four.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f0f58b1b-bb50-42bf-b96a-62c42d569a65%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] GPU is deal-breaker

2017-08-21 Thread Matty South
On Monday, August 21, 2017 at 7:14:29 AM UTC-5, Francesco wrote:
> Hello
> 
> 
> 
> 
> On Mon, Aug 21, 2017 at 12:38 AM,   wrote:
> Hi!
> 
> 
> 
> *** TL;DR: Would the option to attach the GPU to a single qube be feasible? 
> ***
> 
> 
> 
> Recently tried out Q3.2 and Q4.0-rc1. Pretty happy with most of it, and have 
> some ideas on what might make it better (if those ideas are plausible) - but 
> the GPU seems to be the deal breaker.
> 
> 
> 
> On LinuxMint, I like using VLC video player to watch lectures, using it's 
> option to speed up without altering pitch. On both versions of Q, video on 
> VLC behaved badly (often freezing up). Audio was good, so can only think it 
> is GPU issue
> 
> 
> 
> 
> 
> This is not normal, probably an issue with your hardware. Look if your 
> computer is on HCL
>  
> 
> I also use Skype a fair bit on LinuxMint, and find the "share screen" mode 
> useful to show stuff. Video on Skype also performed badly on on both versions 
> of Q, and "share screen" wouldn't work at all. Again, I can only think this 
> is GPU
> 
> 
> 
> 
> 
> For the video it is the same as above, but for Skype and VOIP in general I 
> find it much practical to use it on my cellphone

I can't really speak to the GPU, but for screen sharing with Skype, that will 
not be a possibility on Qubes. Dom0 controls the GUI/desktop and you can't 
install (nor would you ever want to) install an insecure MS product on Dom0. 
For me, I just send screenshots now instead of screen sharing. It's a little 
less convenient, but i'm happy to trade a little convenience for security.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b8efafee-9efe-44ef-932b-6c34b365ad1b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Does Qubes 4 allow a full (HVM?) VM to run in the background without connecting to its window?

2017-09-02 Thread Matty South
Possibly. Are we talking windows? Because "seamless gui" might do the trick.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/026b62e6-4a16-4ecb-a236-efd4fa94f96c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] USB Keyboard thoughts...

2017-12-01 Thread Matty South
I love the Qubes project! I've been thinking of ways to improve the security 
when it comes to USB Keyboards. 

I'm sure a lot of us who use Qubes as our day-to-day OS have a nice keyboard 
attached to the system. Upon plugging in the USB keyboard for the first time, I 
rightfully got a security warning about the implications of passing USB 
Keyboard input into dom0 (think USB Rubber Ducky attack among others). OK, I'm 
on board so far. What surprises me is that I didn't just authorize THIS 
keyboard to pass through to dom0, I have authorized *ANY* USB keyboard to 
access dom0. I verified this with other keyboards and even a home-made Rubber 
Ducky attack using a teensy.

Curious, is there a reason why we don't restrict the authorized USB keyboard 
based on USB Serial number or even VID or PID. Sure with PID/VID, a physical 
attacker who knows your brand of keyboard could still pass through keystrokes, 
but it would still up the bar a little for these style of attacks. 

I'm on Version 3.2 so forgive me if this has been addressed in 4.0.

Secondly, I don't want to be the guy begging for improvements, I would like to 
contribute. Can anyone point me to a good place to start if I want to add this 
feature? I'm thinking here maybe? 
https://github.com/QubesOS/qubes-app-linux-usb-proxy 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fe3f39b9-8b1c-48b1-b1f8-f82882bce81d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Anyone ran a cryptocurrency mining software on qubes?

2017-12-11 Thread Matty South
On Sunday, December 10, 2017 at 8:44:25 AM UTC-6, Ted Brenner wrote:
> I've run a cpu miner for monero but only gotten ~100H/s. Was also curious if 
> it would be possible to use VTd to use gpus.
> 
> 
> On Sun, Dec 10, 2017 at 6:52 AM,   wrote:
> Curious if anyones gotten this to work.
> 
> 
> 
> --
> 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> 
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users...@googlegroups.com.
> 
> To post to this group, send email to qubes...@googlegroups.com.
> 
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/c34b7bc2-4ee6-40e1-867c-895105ef6a69%40googlegroups.com.
> 
> For more options, visit https://groups.google.com/d/optout.
> 
> 
> 
> 
> 
> -- 
> 
> Sent from my Desktop

Disclaimer: I've never done this.

Sounds like you'd have to set up "GPU Passthrough" for mining to be worthwhile 
on Qubes. Here is a little info 
https://groups.google.com/forum/#!searchin/qubes-users/passthrough/qubes-users/cmPRMOkxkdA/gIV68O0-CQAJ

I could be mistaken, but the reason Qubes has trouble with GPU is because it 
breaks some of the trust provided by the VM separation. If you've got to weaken 
your secure OS to mine coins, then why not just use another machine to do it 
and keep your secure OS secure?

Someone please correct me if I'm wrong about GPU passthrough weakening overall 
security. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4aafc5f9-a683-4114-8a5f-a2206019ce28%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Corsair Strafe Keyboard stops working when booting into qubes.

2018-05-21 Thread Matty South
On Sunday, May 20, 2018 at 4:41:51 PM UTC-5, serverhost40 wrote:
> I got a new keyboard (Corsair Strafe RGB), when booting into qubes it stops 
> working. I cannot decrypt qubes to boot with this keyboard, but the mouse 
> works fine. My old keyboard also works fine, but I'd prefer to use the 
> corsair keyboard as switching back and forth is annoying.

Is this a laptop? Are you on Qubes 3.x or 4.x?

My USB keyboard has never worked for initial drive decryption. I have to use 
the built-in laptop keyboard for that. I always assumed it was a security 
protection because the USB VM is not yet started.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/71039448-6975-4528-8a62-284b94ff69c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Corsair Strafe Keyboard stops working when booting into qubes.

2018-05-21 Thread Matty South
On Monday, May 21, 2018 at 8:52:27 AM UTC-5, Matty South wrote:
> On Sunday, May 20, 2018 at 4:41:51 PM UTC-5, serverhost40 wrote:
> > I got a new keyboard (Corsair Strafe RGB), when booting into qubes it stops 
> > working. I cannot decrypt qubes to boot with this keyboard, but the mouse 
> > works fine. My old keyboard also works fine, but I'd prefer to use the 
> > corsair keyboard as switching back and forth is annoying.
> 
> Is this a laptop? Are you on Qubes 3.x or 4.x?
> 
> My USB keyboard has never worked for initial drive decryption. I have to use 
> the built-in laptop keyboard for that. I always assumed it was a security 
> protection because the USB VM is not yet started.

Yeah. Looks like this is a security feature. Look here for reasons why and a 
possible workaround:
https://github.com/QubesOS/qubes-issues/issues/2270

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/17e35ab8-519a-45d1-b783-55617b580414%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How to deal with Yubikey ?

2018-01-23 Thread Matty South
On Tuesday, January 23, 2018 at 2:11:33 AM UTC-6, ThierryIT wrote:
> I am on R3.2 and I would like to avoid upgrading to 4.0 :)
> 
> Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit :
> > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote:
> > > Hello,
> > >
> > > I have today to deal with two problems:
> > >
> > > 1) I am using Yubikey to be authentified on some web site like Github ...
> > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly my 
> > > emails (Thinderbird+Enigmail)
> > >
> > > What to do under Qubes to make this possible ?
> > > I have already sys-usb running.
> > 
> > On Qubes 4.0rc3, I just attach it to the vm as required, and use it.
> > No configuratino is required.
> > 
> > Kushal
> > -- 
> > Staff, Freedom of the Press Foundation
> > CPython Core Developer
> > Director, Python Software Foundation
> > https://kushaldas.in

I can confirm Kushal's experience. Two things I wanted to point out:
1) install yubikey software in the target vm template: 
sudo dnf install yubioath-desktop [for Fedora template]

2) I attach it to the desired VM in dom0 terminal using
qvm-usb -a ...

Then you can double-checke that everything is working here: 
https://demo.yubico.com/

Hope that helps some folks out!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2431a4fb-497d-4dea-b05e-2ea4d19afca3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Do allowing USB Keyboard expose to badusb attacks?

2018-01-25 Thread Matty South
On Wednesday, January 24, 2018 at 4:47:58 AM UTC-6, koto...@gmail.com wrote:
> If a USB keyboard is allowed with /etc/qubes-rpc/policy/qubes.InputKeyboard, 
> does it increase the risk for badusb kind of attacks?

Yes, it does. I asked a similar question here:  
https://groups.google.com/forum/#!topic/qubes-users/52d0rqNnVqU 

The TLDR I got is that someone is working on a "USG hardware firewall mentioned 
in issue 2518" to prevent this kind of thing. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f9efbfb2-0ea4-4a06-80bc-ae3ccee33463%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Do you use Qubes OS as your main OS on primary PC? What kind of work do you get done on it?

2018-02-12 Thread Matty South
On Friday, February 9, 2018 at 4:20:16 PM UTC-6, lemond...@gmail.com wrote:
> Without support for hardware acceleration of virtual machines, plus needing 
> specific hardware compatible with Qubes OS, what kinds of work do you get 
> done if Qubes is your main OS on primary PC?
> 
> I want to run Davinci Resolve, which is a video editor that runs on Linux, 
> but it takes advantage of the discrete GPU, and it seems Qubes does not 
> support hardware acceleration nor virtual machines.
> 
> So, I'm curious, for those who use Qubes, what actual work do you get done?
> 
> I've also tried playing youtube videos but found audio out of sync and I 
> could not resize or maximize the playback window.
> 
> I may have tried the second to latest version released so maybe things have 
> changed or will change in 4.x?
> 
> Not being able to run VMs, Davinci Resolve, or youtube are making me have to 
> look at other options like OS X, Windows 10, and Linux.
> 
> I was leaning towards OS X but enabling case sensitivity for the file system 
> can break certain apps like those from Adobe, or cause other problems.. And I 
> prefer linux/unix like command-lines to DOS, so kind of leaning away from 
> Windows 10.
> 
> That leaves Linux distros like Debian, Mint, e bv  But I'm wondering how 
> secure it will be compared to Qubes?

I use Qubes as my primary OS to work 50 hours per week. I do application 
Penetration Testing full time (White Hat Hacker). I bought a Lenovo Thinkpad 
specifically for Qubes. I watch Youtube and run lots of VMs. I don't have time 
to play games and I don't need a lot of graphics acceleration so GPU isn't a 
problem for me. The OS itself is stable enough that I don't find it a hindrance 
to getting stuff done. There are small hiccups here and there, but I would say 
it is about as many bugs as OSX or Windows. 

The pain points are:
1) Getting everything installed and set-up the way I like it took a while 
(mostly because I was learning).
2) No way to share entire desktop over google hangouts or anything like that 
(you can only do that inside a HVM)
3) Some things appear take a little longer since I am used to doing them 
insecurely on Windows. (stuff like copy/paste, USB, Video Calls)

All in all, I'm extremely happy with my decision to make the switch. I'd say if 
you are looking for a new machine anyways, then get a Qubes-compatible one and 
try it out for 6 months. You can always slap an insecure OS on there if you 
don't like it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6d76b346-78e6-4ad0-a514-e657131aef54%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] VPN from a ProxyVM

2018-03-14 Thread Matty South
On Wednesday, March 14, 2018 at 7:28:58 AM UTC-5, Chris Laprise wrote:
> On 03/13/2018 09:53 PM, Drew White wrote:
> > On Wednesday, 14 March 2018 12:25:12 UTC+11, Chris Laprise  wrote:
> >> On 03/13/2018 08:20 PM, Drew White wrote:
> >>> On Wednesday, 14 March 2018 11:06:22 UTC+11, Chris Laprise  wrote:
>  The current VPN doc is here:
> 
>  https://www.qubes-os.org/doc/vpn/
> >>>
> >>> Thanks for the reply Chris, but that is not what I was looking for as I 
> >>> was wanting to use pptp VPN connections (and similar), not a Qubes VPN.
> >>
> >> I think you mean "not an OpenVPN..."?
> > 
> > I am guessing so, yes, thanks for clarifying.
> > 
> >> FWIW, the resources at those links are meant to be adaptable for
> >> non-OpenVPN setups, and they don't impose any particular type of routing
> >> (other than forbidding access that most call 'leaks'). As for accessing
> >> the LAN directly through a VPN VM, there are simple ways to make an
> >> exception for it.
> >   
> > That's what I don't get. All I want to do is have the VPN connect, nothing 
> > else. So that my AppVM can talk through it to the external.
> 
> OK, this sounds like you want to connect to a remote LAN.
> 
> 
> >>>
> >>> I also want to have one where everything that is going to happen on the 
> >>> remote network is pushed through the VPN, and everything else remains 
> >>> using the local connection.
> >>>
> >>> So there are 2 ways I'm looking at having it work.
> >>>
> >>> But at first, I just want a standard PPTP connection.
> >>
> >> There are plenty of guides out there. But when searching for examples
> >> keep in mind that a Qubes proxyVM behaves much like a router (not a PC
> >> endpoint) so that may be the best type of guide to use.
> > 
> > Exactly, and as a router it should connect a VPN.
> > I used to have it able to do it. So that's why I don't understand why it 
> > isn't working. Since I had it able to do it once before, ages ago, and 
> > nothing has changed since then, and now it isn't working. So it's odd. Thus 
> > I figured maybe something has changed.
> 
> I want to say "Not much has changed in R3.2 networking", but the Linux 
> distros in the templates have changed somewhat over the years. In any 
> case, you'll need to review your configuration and maybe post setup 
> steps to get specific troubleshooting advice.
> 
> At this point, you could focus on fixing the existing configuration or 
> consider a new setup. Unfortunately I haven't noticed other Qubes users 
> posting about PPTP and haven't used it myself for a very long time (only 
> used it on Windows). That may be because PPTP is considered insecure 
> (one reason to switch to OpenVPN or protocol).
> 
> 
> -- 
> 
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

I'll chime in here. You can ignore the firewall scripts and such in that VPN 
doc if you don't care about DNS leaking and such (depends of course on your 
attack model). For all intensive purposes, connecting to your VPN from a proxy 
VM is the same as from an app VM.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/290c5244-2b3b-4b23-a0b5-65220f8f5528%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Diversion: qubes meme

2018-03-20 Thread Matty South
On Monday, March 19, 2018 at 9:04:55 AM UTC-5, Chris Laprise wrote:
> On 03/18/2018 01:02 AM, sevas wrote:
> > #qubicles
> > 
> 
> If you send them to the Antarctic, do they become #qubesicles?
> 
> -- 
> 
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/52f6d0c6-e1b2-43ac-bdd6-6ef9978c2442%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.