whonix-ws-firewall needs a VPN_FIREWALL feature
Closed, ResolvedPublic
Actions

Description

bug report:
https://forums.whonix.org/t/vpn-firewall-doesnt-work/858

design discussion for this feature:
https://forums.whonix.org/t/whonix-workstation-firewall-vpn-firewall-feature-design-discussion/886

Details

Impact: Normal

Related Objects

Mentioned In: T142: improve usability of user -> Tor -> VPN/proxy Tunnel support
Mentioned Here: T460: fix shared VPN/Tor server leak bug
T506: check bitmask for shared VPN/Tor server leak bug

Event Timeline

Patrick created this task.Feb 10 2015, 12:50 PM

Patrick raised the priority of this task from to Normal.

Patrick updated the task description. (Show Details)

Patrick added a project: whonix-ws-firewall.

Patrick added a subscriber: Patrick.

Herald added a project: Whonix. · View Herald TranscriptFeb 10 2015, 12:50 PM

Patrick mentioned this in T142: improve usability of user -> Tor -> VPN/proxy Tunnel support .Feb 10 2015, 2:13 PM

Patrick updated the task description. (Show Details)Feb 23 2015, 11:44 PM

Herald added a subscriber: • WhonixQubes. · View Herald TranscriptFeb 23 2015, 11:44 PM

Patrick added a project: Whonix 11.Mar 17 2015, 9:12 AM

Patrick added a project: Whonix 12.Apr 4 2015, 2:04 PM

Patrick removed a project: Whonix 11.

Patrick lowered the priority of this task from Normal to Wishlist.Jun 26 2015, 9:53 PM

Patrick raised the priority of this task from Wishlist to Normal.

Patrick removed a project: Whonix 12.

Patrick set Impact to Normal.

Patrick added a project: Whonix 12.

Patrick added a subscriber: HulaHoop.

killswitch added a subscriber: killswitch.Jul 10 2015, 6:34 AM

Patrick edited projects, added Whonix 13; removed Whonix 12.Sep 8 2015, 5:42 PM

work on Whonix-Workstation VPN_FIREWALL feature:
https://github.com/Whonix/whonix-ws-firewall/commit/10a5366cb5ea32928a4b0d945621d291da43cdcc

Patrick updated the task description. (Show Details)Jan 9 2016, 6:38 PM

https://github.com/Whonix/whonix-ws-firewall/commit/057cafbca9f44c43dad47c2320840bd176d2f45c

https://github.com/Whonix/whonix-ws-firewall/commit/d065fab590b4793791d6ee0424f40d6e6d2321ea

Patrick changed the task status from Open to Review.Jan 20 2016, 6:18 PM

Apr 20 03:50:45 host systemd-tmpfiles[281]: Two or more conflicting lines for /run/openvpn configured, ignoring.

But since user tunnel has access to /var/run/openvpn, it should be alright.

This is now documented including a fix for T460.

https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_VPN#Setup_Tor_before_a_VPN_.28User_-.3E_Tor_-.3E_VPN_-.3E_Internet.29

And tested.

However, the documentation doing this with openvpn including a fix for T460 ridiculously difficult. Perhaps bitmask would do a bettter job than openvpn, created T506 to figure that out.

whonix-ws-firewall needs a VPN_FIREWALL featureClosed, ResolvedPublicActions

Description

Details

Related Objects

Event Timeline

whonix-ws-firewall needs a VPN_FIREWALL feature
Closed, ResolvedPublic
Actions