Understanding VPN ProxyVM

[ioleo]

@Zrubi @apparatus @solene Thanks everyone for trying to help.

I was reading on other VPN-related topics on this forum and found that:

Why QubesOS need some control over OpenVPN set ups? while other VPNs can work from the box? what is the sense of it?

I encountered an issue where the connection doesn’t work with mirage-firewall. However, when I connect directly to sys-net, it functions correctly. Additionally, I’ve found that I must manually set the DNS server to 1.1.1.1 (or another address) in the resolv.conf file on the virtual machine I wish to use. If I don’t do this, nothing works. Through this experience, I’ve learned that QubesOS indeed employs some unique DNS management strategies, which confirmed something I had suspected. Now, I …

I just tested it. Changeing /etc/resolv.conf in my work qube connected to proxy vm (with VPN connected):

nameserver 10.139.1.1
nameserver 10.139.1.2

to

nameserver 1.1.1.1

And suddenly both VPN-protected and open-internet resources work!

EDIT: for future reference: see answer selected as solution for a better way (without changeing the nameserver).