Re: [qubes-users] Re: Creating an OpenWrt netvm

2016-12-06 Thread Chris Laprise

On 12/06/2016 07:58 PM, jonathanri...@gmail.com wrote:

Hi, I'd just like an update on this, as I am looking to do the same.
OpenWRT seems the best for NetVM as it has all that I could think of.
Also multiple instances for VPNs should not use too much ram.
So if you got it running, could you post your config in git ?
Thanks



This might not be a good idea. Qubes security model says that NICs are 
high-risk devices that should be isolated by themselves. If you combine 
that with your firewall, VPN and other sensitive routing infrastructure 
then a breech caused by your NIC could allow an attacker to monitor and 
control your firewall, VPN etc.


OTOH, combining firewall and VPN functions in the same VM is probably 
fine since those processes are relatively low-risk.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fd64d023-fc2d-7db9-efb7-7f0110f4f6c2%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Creating an OpenWrt netvm

2016-12-06 Thread jonathanrioux
Hi, I'd just like an update on this, as I am looking to do the same.
OpenWRT seems the best for NetVM as it has all that I could think of. 
Also multiple instances for VPNs should not use too much ram.
So if you got it running, could you post your config in git ?
Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/afc332f2-d246-4794-a51f-d1204ceb0333%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.