I’m frequently on a connection that censors VPNs, but allows Tor, so I would like to tunnel VPN over Tor to reach a few sites block Tor but allow VPN.
I’m connecting to Tor with the standard whonix-gw template, and everything appears to work - I can reach any clear net and hidden site. For the VPN VM, I’m using the debian-11 with the qubes-tunnel package from the contrib repo. I use this same template for a different VM and same VPN when my connection isn’t censored, so I know the VPN is working. It’s only when I try to use sys-whonix as the VPN VM’s net VM that I can’t even get the VPN’s IPs.
user@host:~$ host balancer.cstorm.is
Host balancer.cstorm.is not found: 2(SERVFAIL)
user@host:~$ host balancer.cstorm.net
Host balancer.cstorm.net not found: 2(SERVFAIL)
user@host:~$ host balancer.cryptostorm.ch
balancer.cryptostorm.ch has address 185.53.177.50
Host balancer.cryptostorm.ch not found: 3(NXDOMAIN)
Host balancer.cryptostorm.ch not found: 4(NOTIMP)
user@host:~$ host balancer.cryptostorm.ch
balancer.cryptostorm.ch has address 185.53.177.50
Host balancer.cryptostorm.ch not found: 3(NXDOMAIN)
Host balancer.cryptostorm.ch not found: 4(NOTIMP)
user@host:~$ host balancer.cryptstorm.pw
Host balancer.cryptstorm.pw not found: 3(NXDOMAIN)
What is going on here? I even see one of the hosts resolves, but the connection to the VPN never comes up regardless. The result is similar when tried on anon-whonix, my VPN VM, and a standard Debian 11 VM routing through sys-whonix.