Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2024-10-01 01:25:40 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix auto-VPN

Browse Source 
`nm-online` doesn't seem reliable and many times it didn't work, and
piping it to `systemd-cat` would log a small binary blob. The new method
has worked for me 100% of the time.

Also fixing weirdly indented comment in bash script.
This commit is contained in:
Daniel Gonzalez Gasull 2018-07-28 11:17:23 +08:00
parent 9e6bc2d2bc
commit 7213d53eec
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
configuration/vpn.md
View File

@ -56,8 +56,11 @@ Set up a ProxyVM as a VPN gateway using NetworkManager
```bash
# Automatically connect to the VPN once Internet is up
nm-online --quiet --wait-for-startup
nmcli connection up file-vpn-conn passwd-file /rw/config/NM-system-connections/secrets/passwd-file.txt
while ! ping -c 1 -W 1.1.1.1; do
sleep 1
done
PWDFILE="/rw/config/NM-system-connections/secrets/passwd-file.txt"
nmcli connection up file-vpn-conn passwd-file $PWDFILE
```
You can find the actual "file-vpn-conn" in `/rw/config/NM-system-connections/`.
@ -73,8 +76,8 @@ Set up a ProxyVM as a VPN gateway using NetworkManager
Edit `/rw/config/qubes-firewall-user-script` and add these lines:
```bash
# Block forwarding of connections through upstream network device
# (in case the vpn tunnel breaks):
# Block forwarding of connections through upstream network device
# (in case the vpn tunnel breaks)
iptables -I FORWARD -o eth0 -j DROP
iptables -I FORWARD -i eth0 -j DROP
```