search

QubesOS / qubes-issues

The Qubes OS Project issue tracker
https://www.qubes-os.org/doc/issue-tracking/
534 stars 46 forks source link

pptp vpn support and documentation #5671

Open ghost opened 4 years ago

ghost commented 4 years ago

Qubes OS version (if applicable) 4.0 +

It would be great to add pptp connection documentation many companies still use pptp connection it is necessary to receive multicast traffic, for example A pptp connection in Qubes apparently requires some additional firewall rules, or maybe adding modules to the kernel.

http://pptpclient.sourceforge.net/ https://wiki.archlinux.org/index.php/PPTP_Client

chandrashritii commented 4 years ago

@andrewdavidwong I would like to work on this. I have gone through the links provided by @ghost and found queries on using pptp connections in the qubes-user mailing list archives as well. An example can be found here.

I also found some documentation on the whorix wiki about the additional firewall rules needed to use pptp connections on Qubes -

  1. https://www.whonix.org/wiki/VPN-Firewall#Qubes_specific
  2. https://www.whonix.org/wiki/VPN-Firewall#Qubes_specific_-_Fallback_Firewall
  3. https://www.whonix.org/wiki/VPN-Firewall#cite_note-2 Can this be used as a reference?
andrewdavidwong commented 4 years ago

@andrewdavidwong I would like to work on this.

Thank you!

I have gone through the links provided by @ghost and found queries on using pptp connections in the qubes-user mailing list archives as well. An example can be found here.

I also found some documentation on the whorix wiki about the additional firewall rules needed to use pptp connections on Qubes -

  1. https://www.whonix.org/wiki/VPN-Firewall#Qubes_specific
  2. https://www.whonix.org/wiki/VPN-Firewall#Qubes_specific_-_Fallback_Firewall
  3. https://www.whonix.org/wiki/VPN-Firewall#cite_note-2 Can this be used as a reference?

If you're asking whether it's okay to cite those pages (i.e., link to them from inside the Qubes documentation), then yes, that's perfectly fine! :slightly_smiling_face:

ghost commented 4 years ago

@chandrashritii can you report please if you have any success. it will be great. Maybe @unman can help you too. I once tried, it didn’t work out for me. because iptables / nftables is hard to debug. ptpp-template will be good for testing igmp and multicast issues on Cisco MLS. Thanks!

chandrashritii commented 4 years ago

@andrewdavidwong Should the page on pptp-connections be placed under qubes-doc/user/advanced-configuration or qubes-doc/user/common-tasks?

chandrashritii commented 4 years ago

@0rb677 Sorry for the late reply. Can you provide some more details about the OS you are using, your server/VPN configuration settings and your iptable/nftable rules?

andrewdavidwong commented 4 years ago

@andrewdavidwong Should the page on pptp-connections be placed under qubes-doc/user/advanced-configuration or qubes-doc/user/common-tasks?

Sounds like advanced-configuration to me.