Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2024-12-29 01:06:24 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix code block formatting (closes #161)

Browse Source
This commit is contained in:
Andrew David Wong 2016-06-06 02:31:37 -07:00
parent fab1c3043c
commit 9b2ce97fe8
No known key found for this signature in database
GPG Key ID: 8CE137352A019A17
1 changed files with 15 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
configuration/vpn.md
View File

@ -87,7 +87,7 @@ Using a ProxyVM to set up a VPN client gives you the ability to:
3. Setup iptables. 3. Setup iptables.
Edit the firewall script with `sudo nano /rw/config/qubes-firewall-user-script` and add: Edit the firewall script with `sudo nano /rw/config/qubes-firewall-user-script` and add:
``` ~~~
#!/bin/bash #!/bin/bash
# First, block all outgoing traffic # First, block all outgoing traffic
iptables -P OUTPUT DROP iptables -P OUTPUT DROP
@ -112,20 +112,22 @@ Using a ProxyVM to set up a VPN client gives you the ability to:
# (in case the vpn tunnel breaks): # (in case the vpn tunnel breaks):
iptables -I FORWARD -o eth0 -j DROP iptables -I FORWARD -o eth0 -j DROP
iptables -I FORWARD -i eth0 -j DROP iptables -I FORWARD -i eth0 -j DROP
``` ~~~
Now save `/rw/config/qubes-firewall-user-script` and make it executable: Now save `/rw/config/qubes-firewall-user-script` and make it executable:
`sudo chmod +x /rw/config/qubes-firewall-user-script` `sudo chmod +x /rw/config/qubes-firewall-user-script`
4. Create the DNS-handling script. 4. Create the DNS-handling script.
Use `sudo nano /rw/config/openvpn/qubes-vpn-handler.sh` to edit and add: Use `sudo nano /rw/config/openvpn/qubes-vpn-handler.sh` to edit and add:
```
~~~
#!/bin/bash #!/bin/bash
set -e set -e
export PATH="$PATH:/usr/sbin:/sbin" export PATH="$PATH:/usr/sbin:/sbin"
case "$1" in case "$1" in
up) up)
# To override DHCP DNS, assign static DNS addresses with 'setenv vpn_dns' in openvpn config; # To override DHCP DNS, assign static DNS addresses with 'setenv vpn_dns' in openvpn config;
# Format is 'X.X.X.X Y.Y.Y.Y [...]' with quotes. # Format is 'X.X.X.X Y.Y.Y.Y [...]' with quotes.
if [[ -z "$vpn_dns" ]] ; then if [[ -z "$vpn_dns" ]] ; then
@ -150,23 +152,25 @@ up)
fi fi
;; ;;
down) down)
su - -c 'notify-send "$(hostname): LINK IS DOWN !" --icon=dialog-error' user su - -c 'notify-send "$(hostname): LINK IS DOWN !" --icon=dialog-error' user
;; ;;
esac esac
``` ~~~
Now save the script and make it executable: Now save the script and make it executable:
`sudo chmod +x /rw/config/openvpn/qubes-vpn-handler.sh` `sudo chmod +x /rw/config/openvpn/qubes-vpn-handler.sh`
5. Setup the VPN's autostart: 5. Setup the VPN's autostart:
Use `sudo nano /rw/config/rc.local` to edit and add: Use `sudo nano /rw/config/rc.local` to edit and add:
```
~~~
#!/bin/bash #!/bin/bash
groupadd -rf qvpn ; sleep 2s groupadd -rf qvpn ; sleep 2s
sg qvpn -c 'openvpn --cd /rw/config/openvpn/ --config openvpn-client.ovpn \ sg qvpn -c 'openvpn --cd /rw/config/openvpn/ --config openvpn-client.ovpn \
--daemon --writepid /var/run/openvpn/openvpn-client.pid' --daemon --writepid /var/run/openvpn/openvpn-client.pid'
``` ~~~
Now save the script and make it executable: Now save the script and make it executable:
`sudo chmod +x /rw/config/rc.local` `sudo chmod +x /rw/config/rc.local`