[qubes-users] Re: Additional VPN destinations via CLI config?

2017-09-13 Thread filtration 
qubester:
> btw, how or why does one "check their MTU settings?"
>
Why? Incorrect MTU settings caused me to have disconnects from my VPN
connections. After I measured and compensated for poor MTU, my
connections have become much more stable and disconnects come back
online shortly.

How? MTU is essentially packet size. You can measure in CLI by pinging a
server. There are a few tutorials to correct MTU in OpenVPN. Go to one
of them to check it out.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3b7d163d-4d9b-c72a-e97b-cdfb9841b1a7%40posteo.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Additional VPN destinations via CLI config?

2017-09-13 Thread pixel fairy 
On Wednesday, September 13, 2017 at 12:21:03 AM UTC-7, qubester wrote:
> proxyVM rather fwiw
> 
> btw, how or why does one "check their MTU settings?"

ip a

look for a line like this,

2: eth0:  mtu 1500 qdisc mq state UP group 
default qlen 1000






-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ccd0664b-9248-43a2-ad56-0bc74963d72d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Additional VPN destinations via CLI config?

2017-09-13 Thread qubester 

proxyVM rather fwiw

btw, how or why does one "check their MTU settings?"

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bfb711e2-856c-05a0-89bd-979d6df567c3%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Additional VPN destinations via CLI config?

2017-09-11 Thread filtration 
qubester:
> On 09/11/2017 07:37 AM,
> anguilla1980-re5jqeeqqe8avxtiumw...@public.gmane.org
> wrote:
>> I followed the tutorial here, specifically "Set up a ProxyVM as a VPN
>> gateway using iptables and CLI scripts"
>>
>> https://www.qubes-os.org/doc/vpn/
>>
>> I like having the iptables anti-leak rules. However, it's connecting
>> automatically to my VPN providers destination that I downloaded their
>> .ovpn for.
>>
>> Is it possible to compile multiple locations and be able to select
>> which one?
>>
>> OR perhaps I'm going about this the wrong way? Should I instead use
>> the GUI way via NetworkManager? Can I configure that for multiple
>> destination choices then perhaps still add the iptables anti-leak rules?
>>
>> What's the best way?
>>
>> Thanks!
>>
> 
> na, just make another NetVM  like you did for the one you got , or 2 3
> etc up to you ,  what i've been doing is after suspend  just start the
> new non active  VPN NetVM and use it  , after changing the appVMs using
> it ,  bit tedious  but works
> 
Create a different VPN ProxyVM for each location you want to use.
You lose leak protection if you use NetworkManager, you should use the
iptables way.

Once you get the first ProxyVM setup correctly, you can copy its files
to other ProxyVMs to save time. Just verify their permissions and change
the desired server in the .ovpn file. Check your MTU settings, too.



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/30d43377-7311-0970-7934-23594f9c006d%40posteo.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Additional VPN destinations via CLI config?

2017-09-11 Thread qubester 
On 09/11/2017 07:37 AM, 
anguilla1980-re5jqeeqqe8avxtiumw...@public.gmane.org wrote:

I followed the tutorial here, specifically "Set up a ProxyVM as a VPN gateway using 
iptables and CLI scripts"

https://www.qubes-os.org/doc/vpn/

I like having the iptables anti-leak rules. However, it's connecting 
automatically to my VPN providers destination that I downloaded their .ovpn for.

Is it possible to compile multiple locations and be able to select which one?

OR perhaps I'm going about this the wrong way? Should I instead use the GUI way 
via NetworkManager? Can I configure that for multiple destination choices then 
perhaps still add the iptables anti-leak rules?

What's the best way?

Thanks!



na, just make another NetVM  like you did for the one you got , or 2 3 
etc up to you ,  what i've been doing is after suspend  just start the 
new non active  VPN NetVM and use it  , after changing the appVMs using 
it ,  bit tedious  but works


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4cbc7529-7354-7298-f4e6-6986a6a8e914%40riseup.net.
For more options, visit https://groups.google.com/d/optout.