Page MenuHomePhabricator
Create Task
Maniphest T158

whonix-ws-firewall needs a VPN_FIREWALL feature
Closed, ResolvedPublic
Actions

Description

bug report:
https://forums.whonix.org/t/vpn-firewall-doesnt-work/858

design discussion for this feature:
https://forums.whonix.org/t/whonix-workstation-firewall-vpn-firewall-feature-design-discussion/886

Details

Impact
Normal

Related Objects

Event Timeline

Patrick created this task.Feb 10 2015, 12:50 PM
Patrick raised the priority of this task from to Normal.
Patrick updated the task description. (Show Details)
Patrick added a project: whonix-ws-firewall.
Patrick added a subscriber: Patrick.
Herald added a project: Whonix. · View Herald TranscriptFeb 10 2015, 12:50 PM
Patrick mentioned this in T142: improve usability of user -> Tor -> VPN/proxy Tunnel support .Feb 10 2015, 2:13 PM
Patrick updated the task description. (Show Details)Feb 23 2015, 11:44 PM
Herald added a subscriber: • WhonixQubes. · View Herald TranscriptFeb 23 2015, 11:44 PM
Patrick added a project: Whonix 11.Mar 17 2015, 9:12 AM
Patrick added a project: Whonix 12.Apr 4 2015, 2:04 PM
Patrick removed a project: Whonix 11.
Patrick lowered the priority of this task from Normal to Wishlist.Jun 26 2015, 9:53 PM
Patrick raised the priority of this task from Wishlist to Normal.
Patrick removed a project: Whonix 12.
Patrick set Impact to Normal.
Patrick added a project: Whonix 12.
Patrick added a subscriber: HulaHoop.
killswitch added a subscriber: killswitch.Jul 10 2015, 6:34 AM
Patrick edited projects, added Whonix 13; removed Whonix 12.Sep 8 2015, 5:42 PM
Patrick added a comment.Jan 8 2016, 10:07 PM

work on Whonix-Workstation VPN_FIREWALL feature:
https://github.com/Whonix/whonix-ws-firewall/commit/10a5366cb5ea32928a4b0d945621d291da43cdcc

Patrick updated the task description. (Show Details)Jan 9 2016, 6:38 PM
Patrick added a comment.Jan 9 2016, 9:48 PM

https://github.com/Whonix/whonix-ws-firewall/commit/057cafbca9f44c43dad47c2320840bd176d2f45c

Patrick added a comment.Jan 17 2016, 9:24 PM

https://github.com/Whonix/whonix-ws-firewall/commit/d065fab590b4793791d6ee0424f40d6e6d2321ea

Patrick changed the task status from Open to Review.Jan 20 2016, 6:18 PM
Patrick added a comment.Apr 30 2016, 4:33 AM
Apr 20 03:50:45 host systemd-tmpfiles[281]: Two or more conflicting lines for /run/openvpn configured, ignoring.

But since user tunnel has access to /var/run/openvpn, it should be alright.

Patrick closed this task as Resolved.May 4 2016, 6:56 PM
Patrick claimed this task.

This is now documented including a fix for T460.

https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_VPN#Setup_Tor_before_a_VPN_.28User_-.3E_Tor_-.3E_VPN_-.3E_Internet.29

And tested.

However, the documentation doing this with openvpn including a fix for T460 ridiculously difficult. Perhaps bitmask would do a bettter job than openvpn, created T506 to figure that out.

Whonix OLD Issue Tracker · PLEASE DO NOT POST NEW TICKETS HERE · OLD Issue Tracker - Unread Notifications · OLD Issue Tracker - Feed · OLD Issue Tracker - Open Issues · NEW Issue Tracker · Homepage · Blog · Forum · Legal · Imprint · Privacy Policy · Terms of Use · Disclaimer