Qubes/Whonix - Reverse Tethering to Wi-Fi access point

[bigmachine22]

I am running Qubes with Whonix. I am wondering if there is a way for external devices to benefit from the Qubes/Whonix’s torified connection, by creating a Wi-Fi access point that would push all of it’s client device connections through my sys-whonix connection as if the external devices were connecting to the internet via my anon-whonix app cube. Essentially this would be a reverse teathering, that anonymizes any device connected to my Qubes Wi-Fi AP. Is it possible to share an App Qubes internet connection with wi-fi connected devices? Can you please list the steps do so or write a complete tutorial?

[alzer89]

@bigmachine22

I am running Qubes with Whonix.

Welcome to the club!

@bigmachine22

I am wondering if there is a way for external devices to benefit from the Qubes/Whonix’s torified connection, by creating a Wi-Fi access point that would push all of it’s client device connections through my sys-whonix connection as if the external devices were connecting to the internet via my anon-whonix app cube.

Definitely possible, but it involves configuring devices other than your Qubes OS machine. Basic knowledge of networking, DHCP options, routing tables, etc., will also be helpful in this endeavour.

(I’ll edit this to make it more specific later)

The basic steps are:

1. Setting up your proxy of choice that is able to pass things to sys-whonix. This proxy needs to be able to accept incoming data packets from your LAN devices.
2. Make sure that all your LAN devices know how to find your Qubes OS machine, so they can send all their data packets to it, instead of the regular LAN gateway.

There are multiple ways to do these steps. The most hassle-free one is to configure your DHCP server to tell all LAN devices to route their packets via your Qubes OS machine.