Appvms dont have net via vpn vm

[Stumpy]

I am able to ping via the vpn vm but when I try to connect to the net
with an appvm that is using the vpn vm I cant connect to anything. Im
using v4.0 and the script method, not the netmanager method. I have
double checked all the config files that I created and as far as I can
tell they are right. I havent been able to connect using this vpn vm so
its not a case of was working before. Is there a log or something I can
post to help diagnose this issue?
Thanks

[Chris Laprise]

To see log messages, you can test the client as suggested in Step 2. It
may help to use ping in the appvm, first with a known IP address and
then with a domain name (this tests basic connection and DNS).

-

If you think you might have made a mistake with the scripts, I created a
streamlined alternative with no file editing that is being considered
for inclusion in Qubes:

https://github.com/tasket/qubes-tunnel

The process is to run the installer as shown in the Readme, then run
qtunnel-setup and add your VPN config to the qtunnel directory. Full
instructions:

https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[Stumpy]

On 2018-08-18 22:30, Chris Laprise wrote:
> On 08/18/2018 12:39 PM, Stumpy wrote:

> To see log messages, you can test the client as suggested in Step 2.
> It may help to use ping in the appvm, first with a known IP address
> and then with a domain name (this tests basic connection and DNS).
>
> -
>
> If you think you might have made a mistake with the scripts, I created
> a streamlined alternative with no file editing that is being
> considered for inclusion in Qubes:
>
> https://github.com/tasket/qubes-tunnel
>
> The process is to run the installer as shown in the Readme, then run
> qtunnel-setup and add your VPN config to the qtunnel directory. Full
> instructions:
>
> https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service

Thanks for that, I checked the iptables, and tried pinging startpage.com
and it seemed to go well enough but then again I am not wholly sure
about that. I posted the output here: https://pastebin.com/3bZwKr3k
The way you created, does that also have the "fail closed" feature?

[Chris Laprise]

Have you tried pinging an IP address from a connected appvm (not vpn vm)
like this:

ping 216.218.239.22

If that works but not "ping startpage.com" then there is a DNS handling
issue.

I wrote those script instructions long ago, then decided people needed
something easier and more robust. The new code at qubes-tunnel has all
of the fail closed features, too.

[Stumpy]

Yep, tried ip and urls from regular appvms that are using the vpn vm as
a proxy and nada.

Well I was hoping i could get what I had working but I think I'll give
your method a try as well.