Default network configurations

User Support
#1

Hi everyone
Ive had a search and cannot seem to find this answer.

I have recently downloaded and installed whonix 16 with no problems and deleted whonix 15. I am now in the process of cleaning up my qubes machine and I am not sure just how whonix 16 is meant to access the internet and I do not have the old whonix 15 settings to refer to.

Can someone point me to a page where the default settings for internet access are for all vms? What I mean is how qubes installs as a fresh install. As it is now whonix-ws is not connected to the net and I just what to make sure that I route everything properly.

Iįøæ not a genius with this stuff so I cannot really work out how it supposed to be. I thank anybody who could help me here.

Thanks

#2

The templates whonix-gw-16 and whonix-ws-16 do not have any networking. In the Qube Settings it should say ā€œNet qube: (none)ā€. The actual Qubes (such as anon-whonix) which are based on the Template are the ones that will have networking. The standard networking path for a Whonix Qube would be ā€˜anon-whonix > sys-whonix > sys-firewall > sys-netā€™. Where anon-whonix (or the normal Whonix Qube that you work inside) receives networking from sys-whonix, sys-whonix receives networking from sys-firewall, and sys-firewall receives networking from sys-net. Let me know if this makes sense or if you need to know how to set this up.

1 Like
#3

If you followed all the instructions correctly, it should already be configured for you automatically, and everything should ā€œjust workā€:

Maybe you skipped the sudo qubesctl state.sls qvm.anon-whonix step?

#4

Thanks for replies everyone. I dont think that I skipped that step.

Would I just be able to run that command again and that will make things as they should be?

Otherwise I think that I have enough information here to do it manually. But if possible maybe running that command may just do it?

#5

Thanks for the reply. I followed the advice without drama thanks.

I think that my system is in a mess however with regard to just how different templates should be networked and how they should be accessing the internet. That is why I was asking if there was a template that showed how qubes installs initially and the default settings that come with that fresh install.

There is also no doubt that my beginner status is also playing a part in my confusion as I try to get my head around this system.

So, back to my initial question, is there such a guide?

If not is it my intention is to install qubes freshly on another machine and see what that install looks like and compare it with my current one and rectify things from there. I have been using qubes for a fair while but have only just now wanted to start using whonix. I am familiar with whonix but as a vm in virtualbox so there is a bit for me to learn.

But there is such a guide I appreciate a pointer in that direction.

#6

Hi Brad
No templates should be networked. They are able to get updates and
install software by using a proxy over qubes-rpc.
As you are used to Whonix on VBox, you should be able to use Whonix on
Qubes.
The difference is that in Qubes, the qubes are based on templates, so
you see more things than you are used to.

The qubes you use most of the time (and which are like those you used in
VBox) are anon-whonix and sys-whonix.
@adw has already told you the set up:
anon-whonix > sys-whonix > sys-firewall > sys-net

Other qubes usually have sys-firewall as their netvm.
You can change this to use sys-whonix as the netvm if you want all
traffic to go over Tor.

I never presume to speak for the Qubes team.
When I comment in the Forum or in the mailing lists I speak for myself.
#7

Also see:

#8

Thank you everybody for the replies. I am ok with installing software etc and have been for a long time. Its just this whonix that had me thrown. IĪ…have just installed the latest qubes on another machine and am looking to update my current one at any rate, simply because I like the look of the newer qubes!

I may be posting a separate post in the hope that I can get some help with installing on coreboot because that is something that IĀ“m not familar with as I bought the laptop like this and I didnĀ“t know that it would be different to what Iā€™m use to. But I have to do some research yet before I go annoying people, or perhaps consider upgrading the present qubes.