You can attach one VM to gw-15 and get torified connection. But if you’d try to get connection from fedora-30\32, ubuntu-20.04, debian-10, ws-15 (which is reasonable) - it won’t work. Host will be unresolved and unreachable, no matter if ProxyVM attached to sys-firewall, sys-net of some gw-15. R4.0.
This limits isolation, since you can set up a VPN\proxy\mixnet only in a same vm where tor-client is running, and
a) if tor-client would be magically compromised - attacker could route connections not only around tor-mixnet, but also around your vpn\proxy\mixnet too.
b) if your VPN software with next upgrade will receive malware patch, say due to some supply chain attack - it could also replace tor with something else.
Because they’re in a same VM.
But I’m interested in it simply cause I can’t install mixnet-client in a gw-15 yeah…
How do I create network for other qubes from (i.g.) ubuntu 20.04?
In links above heavily implied that it does not require any additional manipulations. Well I tried a lot of combinations (without any VPN\proxy in ProxyVM, just to share the network) and only gw-15 as ProxyVM worked. No other OS (with exception of sys-net and sys-firewall). In a githib link ProxyVM is based on debian-10 though (it 6 months old, which is not a long time for qubes).
Speaking of “how whonix gateway creates network?”, there’s one unique thing about gw-15, If you check ifconfig in it, it’s got:
Persistent two eth’s instead of single one
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet *ip1* netmask 255.255.255.255 broadcast 10.255.255.255 ether *mac1* txqueuelen 1000 (Ethernet) RX packets 107722 bytes 59830813 (57.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 96652 bytes 23618902 (22.5 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 eth1: flags=195<UP,BROADCAST,RUNNING,NOARP> mtu 1500 inet *ip1* netmask 255.255.255.255 broadcast 10.255.255.255 ether *mac2* txqueuelen 1000 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
For each connected qube it’s got virtual interface
vif24.0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet *ip1* netmask 255.255.255.255 broadcast 0.0.0.0 ether *mac3* txqueuelen 32 (Ethernet) RX packets 6265 bytes 311865 (304.5 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 7544 bytes 4615257 (4.4 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Couldn’t find a clue in docs how this supposed to work.
My iptables in gw-15. Don’t understand what rules are responsible for creating network and stuff… Also doubt it’s even in iptables since it just a firewall.
I don’t know where else to search this and which keywords to use. Why so hard…