Nostr Web Client

Have you seen an up to date guide about creating a #VPN qube that works like the #Whonix one? It'd be great to have #RiseupVPN come after #Tor so I can use sites run by wankers who think HTTP requests from Tor are a #CyberAttack

#infosec #privacy #cybersecurity #security

Ava 2y ago

qubes switched from iptables to nftables in 4.2+ and most guides haven't been updated yet (spoke to the person at mullvad who will be doing the updated tutorial so that's coming) not sure about riseup but protonvpn gui works out of the box on a fedora qube (confirmed on 4.1 and 4.2). haven't tested debian or debian xfce.

super simple. install proton vpn in fedora template qube, make sys-vpn, sys-vpn-ch, etc. (however many simultaneous locations you want/need) based on that template, in settings choose sys-firewall as netvm, tick the provides network box and add network manager in services. then add sys-vpn (for example) to sys-whonix as its netvm

Reply to this note

Please Login to reply.

Discussion

Ava 2y ago

then just set the vm qubes and protonvpn apps to start on boot (they will ask for keyring password). you can then add the sys-vpn, sys-vpn-ch etc. proton vpn apps to a launcher on your taskbar for easy access

Dr. Hax 2y ago

Thanks for the encouragement. I spent several hours trying to figure it out. After exhausting the guides on the internet about getting RiseUp to work with OpenVPN, I dug into the source code of their client to find the IP address of their snowflake server which hosts the client cert/key.

After that itn was smooth sailing... until I wanted to connect to the VPN over Tor. Eventually I figured out it was UDP that was screwing me over. Then I had to figure out how top trick network manager into allowing me to specify to use TCP.

In the end I emerged victorious and it's working exactly as intended. I also have notes in a private markdown file in case I need to do this again in the future. Maybe someday I'll publish it. Who knows?

Dr. Hax 2y ago

On a side note, I'm glad I copied down the ID of your note, because my public bookmarks won't load in #Amythest. So I probably would have never been able to get back to this thread if it weren't for me copying the note ID to the VPN task.

Dr. Hax 2y ago

I'll give it a go sometime later this week. I expected there would be some firewall rules required to forward packets for other machines.