Can I Route All Connections Through Kodachi Using the Network in Kodachi?

[qubesn00b]

My TOR connections end sometime where I don’t like.

Kodachi lets me choose exit. I can avoid country with not much free speech.

If I use “Provides Network” could I create VM with a Tor in it that offers connection to other Qube?

I think to try install this configuration will take long time. Won’t trying if won’t works.

Should it work?

[Sven]

I see two questions:

1. can I choose or limit my TOR exit nodes?

2. can I create a tor qube and use it as netvm for other qubes?

The answer to both questions is yes.

1. You can limit TOR exit nodes or even request specific exit nodes. I
   don’t know how to do it, but I read about it being possible. Maybe
   someone else in the forum can give you a pointer. What I can tell you
   is: if you are using sys-whonix, you can right click on the tray icon
   and open a little dialog (I forgot it’s name) … there you can simply
   reset your routing and get a new exit node until you get one that you like.

2. I can tell you how to do this using a package provided by @unman, but
   why don’t you just use sys-whonix?

[augsch]

Answer to 1:
Find your torrc file, which is the config file that tor uses. Edit it , adding, for example,
ExcludeNodes {cn},{hk},{mo}
StrictNodes 1
to the end of it.
StrictNodes 1 makes tor strictly avoid those exit nodes, even if it cannot establish a circuit.
StrictNodes 0 makes tor regard those nodes as the last option, and they might be used when your tor cannot establish a circuit due to lack of nodes.

{kp} = North Korea
{ir}= Iran
{sy} = Syria
{pk} = Pakistan
{cu} = Cuba
{vn} = Vietnam
{ru} = Russia
{by} = Belarus

[qubesn00b]

I would like to do this using the package provided by @unman. There are certain aspects of the Kodachi dashboard that make it possible for me to quickly see what is going on. sys-whonix is good and I could edit it, but I don’t have the same quick visual information that Kodachi has.

So yes, please show me how to do this.

[qubesn00b]

This works. I’d still like to know how to use Kodachi to provide a network just for learning.

[qubesn00b]

Can you please tell how to do this?

I don’t know much like you Sven.

[Sven]

I don’t know anything about Kodachi.

How to create a sys-tor using @unman’s package is discussed in this thread:

Tor without Whonix

Hello @unman, Thank you for critiquing my reply. It was illuminating and helped rectify some of my ignorance on these matters, as well as properly address the topic in a way fitting for a Qubes environment. I am still very new to Qubes OS, both technically and conceptually, and it is that to which I attribute my error. Briefly, I will explain the basis for my impressions in the context of your reply. I attempted to avoid any assumptions about VM proxying or additional Qubes VMs because @Sven’s…

[qubesn00b]

I rewrite question.

I want all network to go through Kodachi.

[Sven]

You could set the ‘provides_network’ property on your Kodachi qube, now you have a second network interface. eth0 is where Kodachi get internet from (what you set as netvm of your qube) and the other vifxxx interface is where all other qubes connect to when you set your Kodachi qube to be their netvm.

That would literally make their traffic go through your Kodachi qube. What if any advantage that brings you is beyond me.

[Naweed047]

so how can we let other vm’s connect to vifxxx because kodachi will boot as an standalone HVM , I tried but it’s not working , I booted up kodachi with “network_provider” enabled and setup new AppVM which using Kodachi as Netvm but there’s no internet connection on it!

[qubesn00b]

i had same result

part of reason for want kodachi relate to dns

also visual of network

i still learn of the dns and how it works and think kodachi help but couldn’t configure

[enmus]

Are you sure you are anonymous and safe with Kodachi?

https://bitsex.net/english/2021/kodachi-linux-is-probably-not-secure/

[qubesn00b]

well of course it terrible idea but would still like to know how