ProxyVM not working all the time

[Scinawa]

Hi,
I have experienced a issue with a ProxyVM I use for openvpn.
My appvm is attached to the proxyvm (both with a fedora21 template). Inside the proxyvm i run openvpn in command line.
Sometimes my appvm just ignore the proxyvm, resulting in a direct access to the internet, withouth passing through the vpn.
Perhaps is something related to a networking problem

When I experience the issue again I would be able to run some tests: tcpdump in proxyvm
A patch could be write some iptables line to drop all non vpn connection in netvm

Thank you

[unman]

@Scinawa
There have been quite a few posts on qubes-users on setting up and using openvpn. How are you directing traffic to the openvpn tunnel?
It's simple to add rules in /rw/config/qubes-firewall-user-script to capture dns, redirect traffic down the tunnel, and restrict output from the proxyVM to openvpn tunnel. (If you do this then you neednt worry about leaks and you have the option of switching the appVM to another proxyVM/netVM without reconfiguration if you choose.)

[unman]

@Scinawa
There have been quite a few posts on qubes-users on setting up and using openvpn. How are you directing traffic to the openvpn tunnel?
It's simple to add rules in /rw/config/qubes-firewall-user-script to capture dns, redirect traffic down the tunnel, and restrict output from the proxyVM to openvpn tunnel. (If you do this then you neednt worry about leaks and you have the option of switching the appVM to another proxyVM/netVM without reconfiguration if you choose.)

[mfc]

hi @Scinawa, I don't know if you saw the recent post in qubes-users as well as the OpenVPN, revisited thread.

[mfc]

hi @Scinawa, I don't know if you saw the recent post in qubes-users as well as the OpenVPN, revisited thread.

[andrewdavidwong]

I'm assuming this issue has been resolved based on the lack of recent activity. If not, please feel free to re-open it.

[andrewdavidwong]

I'm assuming this issue has been resolved based on the lack of recent activity. If not, please feel free to re-open it.