Randomize mac address on Qubes

[almir.a...@gmail.com]

So I followed this guide to randomize my mac address:

https://www.qubes-os.org/doc/anonymizing-your-mac-address/

At the beginning of the guide it prompts me to create a new NetVM in a debian-9 template, which I did. This is the part of the guide I am referring to:

"Next, create a new NetVM using the new template and assign network devices to it."

I created a new NetVM, named it macspoof and assigned my ethernet and wifi network devices to it. Then, I followed the rest of the guide and now my mac address does change whenever I restart sys-net. Here comes what I'm concerned about:

I no longer have internet access via my sys-net VM. I now have to go through the new NetVM I created (the 'macspoof' VM) in order to access the internet, so my sys-firewall has the macspoof VM as its netVM.

Is that how it's supposed to be? Or am I still supposed to be using the sys-net VM to access the internet?

[almir.a...@gmail.com]

I just discovered one more issue:

When I try to setup my VPN as per this guide: https://www.qubes-os.org/doc/vpn/ (see step 2)

I get an error message running the command:

"sudo openvpn --cd /rw/config/vpn --config openvpn-client.ovpn"

The error message reads:

"Options error: unknown --redirect-gateway flag: ipv6
Use --help for more information."

What's the issue here? It worked fine when I didn't use the macspoof thing.

[Chris Laprise]

That's pretty much how its supposed to be: A network device can only be
assigned to one /running/ netVM at a time.

However, you can assign different network devices to each netVM. For
example, only ethernet in sys-net and only wifi in macspoof. Then both
netVMs would be able to run simultaneously.

--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[Chris Laprise]

On 04/30/2017 10:03 AM, almir.a...@gmail.com wrote:
> I just discovered one more issue:
>
> When I try to setup my VPN as per this guide: https://www.qubes-os.org/doc/vpn/ (see step 2)
>
> I get an error message running the command:
>
> "sudo openvpn --cd /rw/config/vpn --config openvpn-client.ovpn"
>
> The error message reads:
>
> "Options error: unknown --redirect-gateway flag: ipv6
> Use --help for more information."
>
> What's the issue here? It worked fine when I didn't use the macspoof thing.

This sounds like --redirect-gateway ipv6 option was intended to be used
with openvpn 2.4 but you're using 2.3 (which doesn't have an ipv6 option).

You could try editing the ovpn to remove the ipv6 option, or upgrade the
templateVM to a version that uses openvpn 2.4 -- instructions for Debian
9, https://www.qubes-os.org/doc/template/debian/upgrade-8-to-9/