[qubes-users] Re: How do I install this Firewall HVM ?

2018-08-27 Thread Who Cares
At all quite nice ideas here but still not what I wanted.

At least I still wish I could run this Kerio-control in a Qubes VM/HVM.
At least I read smth about taking a VMware img and change its format so it 
works in Qubes but it won't work so far.

I tried taking a vmdk and then :

qemu-img convert -O raw Kerio.vmdk kerio.raw
qvm-run --pass-io work:/home/documents/kerio.raw > /home/user/kerio-root.img


Then i created a HVM with --root-move-from /home/user/Kerio-root.img
But neither it will start the HVM nor I can find the root.img in 
/var/lib/qubes/appvms/kerio/

I tried smth else so far: Installing the software Appliance on the same Pc on a 
different HDD and then copy its content to an AppVM but this one even won't 
work...

I am confused about this all. 

Again I really appreciate what Input you all gave me about some other 
solutions, but I really want to install this Kerio System. So perhaps some 
input about that  :).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e2481e76-2da2-4205-a0db-b9fda4b450af%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Assign Sata Device to Qube

2018-08-27 Thread Who Cares


I got a Question about that 

Somehow I got no templates directory under /etc/qubes?

But I found the xen.xml.

And what does "by-name" mean?

Its just about where to put this file so that Qubes pick it up upon boot of 
foo. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ca703380-7b33-4519-8040-f175ed8ef3ee%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Assign Sata Device to Qube

2018-08-25 Thread Who Cares
Am Samstag, 25. August 2018 17:17:45 UTC+2 schrieb Unman:
> On Sat, Aug 25, 2018 at 06:33:25AM -0700, Who Cares wrote:
> > Hi there,
> > 
> > I want to assign my HDD directly to a specific HVM Qube.
> > Its connected per Sata.
> > I already tried with "lspci" or "qvm-pci" but I never find my HDD.
> > With "qvm-block" I find it at dom0:sdb but how can I assign the complete 
> > HDD to a specific Qube even after restart like I can assign PCI devices in 
> > the Qubes Device Manager?
> > 
> > The Qube is an HVM which needs to access the HDD because I want to install 
> > a Linux based System(Kerio control) which cannot handle the Qubes-System 
> > that offers the Space on the System Drive. So I need to pass through a 
> > complete HDD that is supported by this System(Kerio-control) I want to 
> > install in the HVM.
> > 
> > Hopefully someone got a Solution :)
> > 
> > Thanks so far!
> > 
> In 3.2 you could just edit the conf file under /var/lib/qubes...
> 
> In 4.0:
> Have a look at
> https://dev.qubes-os.org/projects/core-admin/en/latest/libvirt.html
> 
> You want to add a new device: use normal Xen configuration.
> https://libvirt.org/formatdomain.html#elementsDisks will help.
> Use the phy driver, and specify the source as /dev/sdX, and target dev on 
> your qube.
> 
> unman

I do not really know how to use this information there.
What should I work myself into first to understand this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7bc036af-dc6c-4b68-be10-e00794b6a407%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes as server

2018-08-25 Thread Who Cares
I did the same and you just should keep in mind that the sys-firewall would 
block any communication between VM's or between Clients and Qubes VM´s.

Someone posted this Link:
https://www.qubes-os.org/doc/firewall/#enabling-networking-between-two-qubes
it helped a lot.

Just make sure that you either update iptable rules for each of your Service 
VM´s (for example Web-server-VM) or connect the Service VM's directly to 
sys-net without sys-firewall but this is, I think, not recommended.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0e2df1ac-8416-4e9c-bc09-41455391a23c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Assign Sata Device to Qube

2018-08-25 Thread Who Cares
Hi there,

I want to assign my HDD directly to a specific HVM Qube.
Its connected per Sata.
I already tried with "lspci" or "qvm-pci" but I never find my HDD.
With "qvm-block" I find it at dom0:sdb but how can I assign the complete HDD to 
a specific Qube even after restart like I can assign PCI devices in the Qubes 
Device Manager?

The Qube is an HVM which needs to access the HDD because I want to install a 
Linux based System(Kerio control) which cannot handle the Qubes-System that 
offers the Space on the System Drive. So I need to pass through a complete HDD 
that is supported by this System(Kerio-control) I want to install in the HVM.

Hopefully someone got a Solution :)

Thanks so far!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/74735d81-08a2-4df5-9094-dfab61f011ac%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes Server HVM network problem

2018-08-24 Thread Who Cares

> See https://www.qubes-os.org/doc/firewall/.

worked fine there :)

> Not natively with Qubes. However, it might be possible to bridge your
> Win-serv VM straight to your LAN, then your other Windows Client VM could
> access it like normal. See
> https://www.qubes-os.org/doc/network-bridge-support/; unknown if anyone
> has accomplished this under 4.0. So you'd have two separate sys-nets:
> 
> Windows Server VM --- sys-net2 (bridge on Lan2 interface)
> 
> Windows Client VM --- sys-firewall --- sys-net1 (on Lan1 interface to same
> network)

I just assigned the second LAN to the Win-serv Vm this worked just fine here :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/88f2e32d-0f4a-4bd4-9e58-2942d87a9a3b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes Server HVM network problem

2018-08-23 Thread Who Cares
Hello there,

I am trying to build a Qubes Server and I want 2 Windows HVMs.
Heres the Setup:

__  
 
--> sys-net(internal(Lan2)) --> Some other Windows-Clients
--/
Windows Server-|
--\ 
   --> sys-firewall --> sys-net(Internet(Lan1)) 
 Windows Client --/
__

My problems here are :

   1: Network between booth Windows HVM (I don´t know how to accomplish)
   2: Can I attach 2 Networking VMs to the Win-serv VM? 
__

I was already thinking about not to use Qubes but the Xen-Distribution.
Is Qubes the right Solution for this?
__

Thank you so far :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/93de7da8-cbf3-49e5-89b2-ecb587028300%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Connect 2 Windows HVM for Windows networking

2018-08-22 Thread Who Cares
I try to connect a Windows 2012 Server R2 essentials with a win 7 professional. 
I want that they can communicate just like they were 2 seperate PC's connected 
via LAN.

Any thoughts on this ?

Thanks! 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5ff048b7-4a59-41d4-8a0b-4d14f3939d14%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How do I install this Firewall HVM ?

2018-08-14 Thread Who Cares
I´m trying to implement this Kerio-control system.
I thought this would have been a nice combo of firewall and VPN.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9ebefede-32d0-4a88-b9ec-90fc49fdabf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How do I install this Firewall HVM ?

2018-08-14 Thread Who Cares
Hello,

I am using qubes 4.0 and i am trying to install a firewall.
I try to isntall kerio control (http://www.kerio.de/products/kerio-control) as 
it supports VPN. At the end i want to use it as the firewall-VM rather than buy 
a physical firewall.

Kerio-control got some several versions:

  1: software Applience (linux kernel 3.16 based OS)
  2: VMware Virtual Applience
  3: Hyper-V Virtual Applience

I thought it would be possible first to install the it using the software 
applience in a HVM. So I made a HVM with no kernel and started it assigning the 
installation ISO like this :

qvm-start kerio --cdrom=:/home/user/Downloads/kerio.iso

It is booting it in the VM, but installation fails at the point where it says " 
no supported drive found ".
Then I searched if it would be possible attaching a specific drive-device just 
for this VM in the Quebes Manager. And this it so far. I am stuck here now.

I dont know how i could install it so I can use it as Firewall and the 
VPN-features.

Did I use the wrong Applience ?
Or can I imitate a physical Drive only for this VM ?

I hope anyone would spend some time helping me with this project of mine.

At the end it is one PC where is installed qubes. This one is a local-server
This PC got 2 LAN devices i could attach separately.
I want 2 routes.

Route 1: Net-VM(LAN 1) --> firewall-VM(Kerio-Control with VPN)
Route 2: Windows-Server HVM with a specific Programm.(attached LAN 2)

Scenario 1: Local Network Windows PC working with a Programm wich need this 
Windows Server Programm Service

Scenario 2: A dude located in Timbuktu(or whatever) want to work on the same 
local Network using the kerio-control VPN and his Windows device needs to 
communicate with the windows Server.

Any thougts about this ?


Thanks so far! 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f8b8d2d0-3a26-4d49-b260-0c18b19b1a66%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How do I install a Firewall ? Using Qubes as local Server !

2018-08-14 Thread Who Cares
Hello,

I am using qubes 4.0 and i am trying to install a firewall.
I try to isntall kerio control (http://www.kerio.de/products/kerio-control) as 
it supports VPN. At the end i want to use it as the firewall-VM rather than buy 
a physical firewall. 

Kerio-control got some several versions:

  1: software Applience (linux kernel 3.16 based OS)
  2: VMware Virtual Applience
  3: Hyper-V Virtual Applience

I thought it would be possible first to install the it using the software 
applience in a HVM. So I made a HVM with no kernel and started it assigning the 
installation ISO like this :

qvm-start kerio --cdrom=:/home/user/Downloads/kerio.iso

It is booting it in the VM, but installation fails at the point where it says " 
no supported drive found ".
Then I searched if it would be possible attaching a specific drive-device just 
for this VM in the Quebes Manager. And this it so far. I am stuck here now.

I dont know how i could install it so I can use it as Firewall and the 
VPN-features.

Did I use the wrong Applience ?
Or can I imitate a physical Drive only for this VM ?

I hope anyone would spend some time helping me with this project of mine.

At the end it is one PC where is installed qubes. This one is a local-server
This PC got 2 LAN devices i could attach separately.
I want 2 routes.

Route 1: Net-VM(LAN 1) --> firewall-VM(Kerio-Control with VPN)
Route 2: Windows-Server HVM with a specific Programm.(attached LAN 2)

Scenario 1: Local Network Windows PC working with a Programm wich need this 
Windows Server Programm Service

Scenario 2: A dude located in Timbuktu(or whatever) want to work on the same 
local Network using the kerio-control VPN and his Windows device needs to 
communicate with the windows Server.

Any thougts about this ?


Thanks so far! 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/57d2deae-8083-49a2-98e3-9c7d479d981b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.