Re: [qubes-users] VPN for Linux Dummies

2019-01-13 Thread seshu
On Sunday, January 13, 2019 at 3:03:49 PM UTC, Chris Laprise wrote:
> On 01/11/2019 05:48 PM, seshu wrote:
> > Chris, I recently got Nordvpn running on my 4.0.1 and I used their .deb 
> > package to install their app.
> > 
> > The one thing I like about their app is that when it fires up it scans the 
> > hundreds of servers they have to identify the server that is best to 
> > connect to. The process that Qubes-vpn-support uses relies on the user 
> > manually deciding which of the hundreds plus servers to use right, and then 
> > creating a ln to that ovpn file?
> > 
> > Do you think there could be a way to streamline or automate which ovpn file 
> > to use?
> > 
> > Thanks!
> 
> Its impossible to tell which servers for a given region a VPN provider 
> considers to be 'best'. Some providers like PIA allow you to specify a 
> region by domain name, and that domain name represents a bank of servers 
> from which a server is chosen at connection time; it appears to be a 
> standard load-balancing configuration.
> 
> If you don't want to use one server IP all the time, you could add many 
> IPs to the conf file along with 'remote-random' which will choose one 
> randomly. Alternately, you could see if NordVPN has regional domain 
> names and use one of those in your conf.
> 
> -- 
> 
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

Ok thanks. that makes sense. I'll look into that aspect.

>From a security perspective, checking for leaks, etc. is there a particular 
>tool or technique you like to use? this idea of leaks is new to me so I want 
>to check the nordvpn setup I have now to see how it compares.

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/492274b5-7a15-49d2-b1b6-9b6578365761%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] VPN for Linux Dummies

2019-01-13 Thread Chris Laprise

On 01/11/2019 05:48 PM, seshu wrote:

Chris, I recently got Nordvpn running on my 4.0.1 and I used their .deb package 
to install their app.

The one thing I like about their app is that when it fires up it scans the 
hundreds of servers they have to identify the server that is best to connect 
to. The process that Qubes-vpn-support uses relies on the user manually 
deciding which of the hundreds plus servers to use right, and then creating a 
ln to that ovpn file?

Do you think there could be a way to streamline or automate which ovpn file to 
use?

Thanks!


Its impossible to tell which servers for a given region a VPN provider 
considers to be 'best'. Some providers like PIA allow you to specify a 
region by domain name, and that domain name represents a bank of servers 
from which a server is chosen at connection time; it appears to be a 
standard load-balancing configuration.


If you don't want to use one server IP all the time, you could add many 
IPs to the conf file along with 'remote-random' which will choose one 
randomly. Alternately, you could see if NordVPN has regional domain 
names and use one of those in your conf.


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/420809af-4d30-c07a-6325-1af49ed50899%40posteo.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] VPN for Linux Dummies

2019-01-11 Thread seshu
On Monday, December 17, 2018 at 9:16:38 PM UTC, Chris Laprise wrote:
> On 12/17/2018 03:09 PM, stefanneuhaus2...@gmail.com wrote:
> > With Qubes 4.0 i got stuck with VPN (NordVPN)  installation because i have 
> > only basic knowledge of linux.
> > 
> > I found a lot of info, but most relevant are these from the Qubes Github:
> > 
> > https://github.com/tasket/Qubes-vpn-support
> > https://github.com/tasket/qubes-tunnel
> > https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service
> > 
> > I was successful in setting up an appvm with vpn-handler-openvpn
> > I installed qubes-tunnel.git in fedora template
> > I copied the region relevant but general nordvpn config files from 
> > https://nordvpn.com/de/ovpn/ to /rw/config/vpn ...
> > 
> > But i got stuck, with a lot of questions on these different instructions. 
> > What is the qubes-vpn-support folder? How to enter the login and passwort 
> > for testing the connection to nordvpn? Is the vpn tunnel necessary?
> > 
> > Do you have some hints? (I can`t answer tomorrow, but on wednesday.)
> > 
> > Thx. Stefan
> > 
> 
> Just want to state for list readers that Qubes-vpn-support and 
> qubes-tunnel do the same thing; they're not intended to be combined.
> 
> I think the alternative you're looking for is the first part of the 
> Qubes VPN doc:
> 
> https://www.qubes-os.org/doc/vpn/#set-up-a-proxyvm-as-a-vpn-gateway-using-networkmanager
> 
> This way you can use Network Manager documentation for additional 
> guidance in the GUI, or use any specific steps NordVPN has created for 
> Network Manager.
> 
> 
> -- 
> 
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

Chris, I recently got Nordvpn running on my 4.0.1 and I used their .deb package 
to install their app.

The one thing I like about their app is that when it fires up it scans the 
hundreds of servers they have to identify the server that is best to connect 
to. The process that Qubes-vpn-support uses relies on the user manually 
deciding which of the hundreds plus servers to use right, and then creating a 
ln to that ovpn file?

Do you think there could be a way to streamline or automate which ovpn file to 
use?

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/881c935f-86d6-4000-8a3d-0e54a9ff047d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] VPN for Linux Dummies

2018-12-17 Thread Chris Laprise

On 12/17/2018 03:09 PM, stefanneuhaus2...@gmail.com wrote:

With Qubes 4.0 i got stuck with VPN (NordVPN)  installation because i have only 
basic knowledge of linux.

I found a lot of info, but most relevant are these from the Qubes Github:

https://github.com/tasket/Qubes-vpn-support
https://github.com/tasket/qubes-tunnel
https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service

I was successful in setting up an appvm with vpn-handler-openvpn
I installed qubes-tunnel.git in fedora template
I copied the region relevant but general nordvpn config files from 
https://nordvpn.com/de/ovpn/ to /rw/config/vpn ...

But i got stuck, with a lot of questions on these different instructions. What 
is the qubes-vpn-support folder? How to enter the login and passwort for 
testing the connection to nordvpn? Is the vpn tunnel necessary?

Do you have some hints? (I can`t answer tomorrow, but on wednesday.)

Thx. Stefan



Just want to state for list readers that Qubes-vpn-support and 
qubes-tunnel do the same thing; they're not intended to be combined.


I think the alternative you're looking for is the first part of the 
Qubes VPN doc:


https://www.qubes-os.org/doc/vpn/#set-up-a-proxyvm-as-a-vpn-gateway-using-networkmanager

This way you can use Network Manager documentation for additional 
guidance in the GUI, or use any specific steps NordVPN has created for 
Network Manager.



--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/600f0ff5-3070-546e-7ba9-666e911b2211%40posteo.net.
For more options, visit https://groups.google.com/d/optout.