Page MenuHomePhabricator
Create Task
Maniphest T372

Qubes-Whonix Whonix-Workstation TemplateVMs block access to (torified) open internet
Closed, InvalidPublic
Actions

Description

As of Qubes-Whonix 10, Qubes-Whonix Whonix-Workstation TemplateVMs are capable to connect to open internet (over Tor).

Is it a bug or feature?

I guess we should keep connections to torproject.org (Tor Browser updates, perhaps anonymity/connectivity check), Debian, Whonix and Qubes repository allowed, but block the rest? Similar to Qubes' default Fedora TemplateVM?

Details

Impact
Normal

Related Objects

Event Timeline

Patrick created this task.Jul 3 2015, 5:21 PM
Patrick raised the priority of this task from to Normal.
Patrick updated the task description. (Show Details)
Patrick added projects: qubes-whonix 12, Qubes, Whonix 12, security, bug.
Patrick set Impact to Normal.
Patrick added subscribers: Patrick, nrgaway, marmarek and 2 others.
Herald added a project: Whonix. · View Herald TranscriptJul 3 2015, 5:21 PM
Herald added subscribers: • WhonixQubes, troubadour. · View Herald Transcript
Patrick added a comment.Jul 25 2015, 3:25 PM

See also this post by @marmarek:
https://groups.google.com/d/msg/qubes-users/l71lkxWc1c0/q214W9prb3QJ

Patrick edited projects, added Whonix 13; removed Whonix 12, qubes-whonix 12.Aug 19 2015, 10:14 PM
Patrick renamed this task from Qubes-Whonix Whonix-Workstation TemplateVMs block access to open internet to Qubes-Whonix Whonix-Workstation TemplateVMs block access to (torified) open internet.Sep 8 2015, 4:49 PM
Patrick mentioned this in T466: Qubes sys-whonix does not do its job as Qubes FirewallVM.Jan 19 2016, 1:22 AM
Patrick edited projects, added Whonix 14; removed Whonix 13.Mar 18 2016, 3:21 PM
Patrick added a comment.EditedMar 18 2016, 3:25 PM

As discussed in sys-whonix does not yet function was Qubes FirewallVM, in future TemplateVMs will not be needing their own NetVM anymore.

Rather than implementing this ticket Qubes-Whonix Whonix-Workstation TemplateVMs block access to (torified) open internet, the solution to this ticket is to wait for Qubes to implement the following tickets:

Patrick closed this task as Invalid.Aug 15 2016, 10:38 PM
Patrick claimed this task.

Duplicate of T466.

Whonix OLD Issue Tracker · PLEASE DO NOT POST NEW TICKETS HERE · OLD Issue Tracker - Unread Notifications · OLD Issue Tracker - Feed · OLD Issue Tracker - Open Issues · NEW Issue Tracker · Homepage · Blog · Forum · Legal · Imprint · Privacy Policy · Terms of Use · Disclaimer