VPN instructions for 4.2

[1choice]

Oh, I’ve assumed that you have Qubes OS 4.2 since this topic is about 4.2.
For Qubes OS 4.1 you should use Qubes-vpn-support without my patch and it should work.
But seeing that you’re not the only one with this problem:

VPN (tasket/Qubes-vpn) stopped working (Error iptables: Bad rule)

I’ve been using the VPN setup from tasket/Qubes-vpn, which has been workin fine for years, but recently stopped working. I’m on Qubes 4.1 and the VM is Fedora-37. When running openvpn directly, it works fine, but the auto setup througn Qubes service is failing: qubes-vpn-setup[2130]: iptables: Bad rule (does a matching rule exist in that chain?). Any ideas how to debug this?

Maybe some recent update in Qubes OS 4.1 broke something for Qubes-vpn-support.
Can you post the output of these commands?

@1choice

It seems that proxy-firewall-restrict script is not being called.
Check if it’s present:

ls -la /rw/config/qubes-firewall.d/
ls -la /rw/config/proxy-firewall-restrict