How to connect to home network through VpnVM?

47 views
Skip to first unread message

Gaiko Kyofusho

unread,
May 8, 2017, 8:56:10 PM5/8/17
to qubes...@googlegroups.com
 I have noticed that I am not able to connect to my home network server using nautilus

 smb://servername/
 
or via cmdline
 
 sudo mount -t cifs //servername/directory ~/localDir2MountOn/ -o user=u sername,password=password
 
 Thing is when my appvm is using the VpnVM the mounting process gives me  an error (times out i think) but if I switch my appvm to the regular firewallVM then they mount just fine?
 
 So, is there a way to get around this without giving up the using the V PN?
 Thx!

Chris Laprise

unread,
May 8, 2017, 9:48:45 PM5/8/17
to Gaiko Kyofusho, qubes...@googlegroups.com
The simplest and most secure way is to have another appVM access the LAN
through sys-firewall.

--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

Gaiko Kyofusho

unread,
May 9, 2017, 8:38:29 AM5/9/17
to Chris Laprise, qubes...@googlegroups.com
Doh... I was hoping there was another (safe) way, but can do that, just need to get myself in the habit I guess.
Thx

Chris Laprise

unread,
May 9, 2017, 4:59:28 PM5/9/17
to Gaiko Kyofusho, qubes...@googlegroups.com
On 05/09/2017 08:37 AM, Gaiko Kyofusho wrote:
> Doh... I was hoping there was another (safe) way, but can do that, just
> need to get myself in the habit I guess.
> Thx

You could add a rule like this to the top of your FORWARD chain:
-I FORWARD -i vif+ -o eth0 -d lan_subnet_here -j ACCEPT

Depending on how your VPN provider configured the VPN route commands,
this may allow your VMs to talk to the LAN through the VPN VM. But there
is no easy way to (consistently) allow this for only particular appVMs
and there is the risk that a compromised appVM could attack devices on
your LAN, identify you to third parties, etc.
Reply all
Reply to author
Forward
0 new messages