Re: [qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-17 Thread Chris Laprise
On 10/16/2016 08:50 AM, 4lpt9o+3m11o9qubb38o via qubes-users wrote: You don't need to manually add the iptables rules. When enable the 'qubes-yum-proxy' on the VPNVM the rule to iptables is automatically added: Chain PR-QBS-SERVICES (1 references) pkts bytes target prot opt in out

[qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-16 Thread 4lpt9o+3m11o9qubb38o via qubes-users
You don't need to manually add the iptables rules. When enable the 'qubes-yum-proxy' on the VPNVM the rule to iptables is automatically added: Chain PR-QBS-SERVICES (1 references) pkts bytes target prot opt in out source destination 0 0 REDIRECT tcp

Re: [qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread Manuel Amador (Rudd-O)
On 10/15/2016 04:56 PM, 4lgaqp+cqeepdnbinsts via qubes-users wrote: > Hi Chris, > > Thanks for the suggestion. > Just to clarify, the VPN tunnel was created within the sys-firewall, I believe the VPN set up by the instructions in the official docs interfere with the updates proxy functionality.

Re: [qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread Manuel Amador (Rudd-O)
On 10/15/2016 04:56 PM, 4lgaqp+cqeepdnbinsts via qubes-users wrote: > Hi Chris, > > Thanks for the suggestion. > Just to clarify, the VPN tunnel was created within the sys-firewall, and > currently that's the only proxyVM that I'm using (apart from the sys-whonix), > hence all traffic from the

Re: [qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread johnyjukya
> Ok, so I tried to enable the updates proxy in the sys-firewall > consequently forcing all updates to go through the VPN, I followed the > instructions outlined here - > https://www.qubes-os.org/doc/software-update-vm/#updates-proxy > However, as soon as I try to run the updates on one of the

[qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread 4limaw+5vktrow980bj4 via qubes-users
I was finally able to put this to work! I have to set the sys-firewall as a qubes-yum-proxy forcing also all the apt/yum traffic through the tunnel. Everything seems to be working fine now, although I do get a warning on the sys-firewall on the firewall settings while using the Qubes VM Manager:

Re: [qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread Chris Laprise
On 10/15/2016 12:56 PM, 4lgaqp+cqeepdnbinsts via qubes-users wrote: Hi Chris, Thanks for the suggestion. Just to clarify, the VPN tunnel was created within the sys-firewall, and currently that's the only proxyVM that I'm using (apart from the sys-whonix), hence all traffic from the sys-net

[qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread 4li11b+ehek5v7n6mpmg via qubes-users
Ok, so I tried to enable the updates proxy in the sys-firewall consequently forcing all updates to go through the VPN, I followed the instructions outlined here - https://www.qubes-os.org/doc/software-update-vm/#updates-proxy However, as soon as I try to run the updates on one of the vmtemplate

[qubes-users] Re: Unable to uptade templates affer forced all traffic trhough VPN

2016-10-15 Thread 4lgpou+6fbuwvbjmjbe8 via qubes-users
Unfortunately I overlooked the config. There's already an automatic rule that whitelists all VMs that are marked to 'Allow connections to Updates proxy' to connect to the proxy on port 8082, therefore my suggestion would not work (specially given the fact that the rule to block all traffic is