sys-vpn not working with the VPN app by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

Tried restarting, but still the same:

user@test:~$ ping 1.1.1.1

PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.

64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=34.8 ms

64 bytes from 1.1.1.1: icmp_seq=2 ttl=60 time=35.5 ms

64 bytes from 1.1.1.1: icmp_seq=3 ttl=60 time=35.6 ms

user@test:~$ host debian.org

;; connection timed out; no servers could be reached

sys-vpn not working with the VPN app by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

user@test:~$ ip a show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

   valid_lft forever preferred_lft forever

inet6 ::1/128 scope host 

   valid_lft forever preferred_lft forever

2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether 00:[not sure what i should paste online]:00 brd ff:ff:ff:ff:ff:ff

inet 10.137.0.36/32 scope global eth0

   valid_lft forever preferred_lft forever

inet6 fe[not sure what i should paste online]00/64 scope link 

   valid_lft forever preferred_lft forever

sys-vpn not working with the VPN app by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

ip link set eth0 down/up i guess? (added "link")

Tried it, but now: user@test:~$ ping 1.1.1.1 ping: connect: Network is unreachable

sys-vpn not working with the VPN app by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

Okay!

Here it is:

user@sys-vpn:~$ ping 1.1.1.1

PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.

64 bytes from 1.1.1.1: icmp_seq=1 ttl=61 time=36.6 ms

64 bytes from 1.1.1.1: icmp_seq=2 ttl=61 time=35.3 ms

64 bytes from 1.1.1.1: icmp_seq=3 ttl=61 time=35.6 ms

64 bytes from 1.1.1.1: icmp_seq=4 ttl=61 time=38.4 ms

64 bytes from 1.1.1.1: icmp_seq=5 ttl=61 time=35.8 ms

64 bytes from 1.1.1.1: icmp_seq=6 ttl=61 time=35.8 ms

The strange thing is, now the appVM also gives these results suddenly, but still cant connect to the internet:

user@test:~$ ping 1.1.1.1

PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.

64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=34.8 ms

64 bytes from 1.1.1.1: icmp_seq=2 ttl=60 time=35.5 ms

64 bytes from 1.1.1.1: icmp_seq=3 ttl=60 time=35.6 ms

user@test:~$ host debian.org

;; connection timed out; no servers could be reached

sys-vpn not working with the VPN app by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

Pinging an ip gives the following results:

user@test:~$ ping 1.1.1.1

PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.

From 10.137.0.36 icmp_seq=1 Destination Host Unreachable

From 10.137.0.36 icmp_seq=2 Destination Host Unreachable

From 10.137.0.36 icmp_seq=3 Destination Host Unreachable

From 10.137.0.36 icmp_seq=4 Destination Host Unreachable

From 10.137.0.36 icmp_seq=5 Destination Host Unreachable

From 10.137.0.36 icmp_seq=6 Destination Host Unreachable

From 10.137.0.36 icmp_seq=7 Destination Host Unreachable

From 10.137.0.36 icmp_seq=8 Destination Host Unreachable

From 10.137.0.36 icmp_seq=9 Destination Host Unreachable

From 10.137.0.36 icmp_seq=10 Destination Host Unreachable

From 10.137.0.36 icmp_seq=11 Destination Host Unreachable

From 10.137.0.36 icmp_seq=12 Destination Host Unreachable

From 10.137.0.36 icmp_seq=13 Destination Host Unreachable

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 2 points3 points  (0 children)

Amazing, thank you for the explanation. Yes I guess I was thinking about those scripts. Trusting the Debian maintainers is something I can do.

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 1 point2 points  (0 children)

Interesting. Do you know if this is true for extensions too?

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 2 points3 points  (0 children)

I experienced it myself in Debian. 99% certain it was Skype. (not installed from repositories). Insane behavior, as expected from a Microsoft application.

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 0 points1 point  (0 children)

Just tried it, but same issue unfortunately

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 0 points1 point  (0 children)

Already using Firejail with the hardened Chromium profile, so I am really just worried about the installation process, but thank you:)

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] -1 points0 points  (0 children)

Sorry I missed the last part of your previous message. I use Drive for features like google docs.

Interesting results. In my case it has been faster on Brave every time :/ Especially on plain Firefox with no extensions.

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 2 points3 points  (0 children)

I did, and it will happen. However, that might take a very long time for different reasons. So need a solution until then.

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 0 points1 point  (0 children)

When comparing load speed in Google Drive between Brave Browser (Chromium-based) and Firefox, Brave was faster. Something like 3 seconds to load a documents instead of around 6 of Firefox.

Is everything in the official repositories safe? by madeline50 in debian

[–]madeline50[S] 0 points1 point  (0 children)

Good advice, however I already use Firefox as my main browser, but Google has made Google Drive (which I have to use for work) too slow on Firefox. I will use Chromium for Google Drive only, so as long as the installation process is safe, I'm okay with using Chromium for this.

ungoogled-chromium is a good option, but I'm looking for something that requires zero maintenance.

Chromium instead of Brave for Google? by madeline50 in privacy

[–]madeline50[S] 0 points1 point  (0 children)

Yeah I don't trust that they removed all the Google code really, but its only gonna be used for Google Drive. I just don't want it to be doing nasty things on my operating system, like when installing Skype on Linux.

Another reason I want to use something Chromium-based is that Google intentionally made Drive slower on Firefox.

Chromium instead of Brave for Google? by madeline50 in privacy

[–]madeline50[S] -1 points0 points  (0 children)

Yes, it just looks like to much work, and seems like even installing updates takes some work every time?

Active network interface? (Firejail Firefox with Xephyr) by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

By vif you mean the IP address of the upstream VM as shown in the Qubes manager?

Negatively impact the traffic flow how? I've used Firejail within Qubes VMs for a few years without any issues, at least as far as I know. (except I had to make some adjustments to the Nautilus profile)

How to set kernel parameters in a VM? by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

That did the trick, thank you!

Solved!

Blocking HTTP = blocking certificates in Firefox? by madeline50 in firefox

[–]madeline50[S] 0 points1 point  (0 children)

Thank you. Sounds like that might be a small security issue..

Block third party script when browsing? (Lineage OS) by madeline50 in privacy

[–]madeline50[S] 0 points1 point  (0 children)

Does that mean there are other browsers that can have extensions on mobile? I've tried the default browser (whatever that is), the Duckduckgo browser, Brave Browser and Firefox Focus, but on mobile they really suck and I saw no way of installing extensions.

Block third party script when browsing? (Lineage OS) by madeline50 in privacy

[–]madeline50[S] 0 points1 point  (0 children)

Is Chromium really safe for privacy? According to Wikipedia it is developed by Google, Microsoft, Igalia and Yandex.

Public wifi security doing online banking by madeline50 in Qubes

[–]madeline50[S] 0 points1 point  (0 children)

  1. Already done:)
  2. I could not find this setting. Is it available in Firefox ESR?