0

Always, when I try to run kill switch for VPN my Tor Browser stops working and I am not sure why it happened. I am not good in firewalls and port forwarding but I would like to learn. I have configuration: VPN - Whonix Gateway - Whonix Workstation. I am using Fedora 29 and my VPN is NordVPN(setup on OpenVPN).How can I configure firewall that killswitch will allow TOR like in my configuration(VPN - Whonix Gateway - Whonix Workstation). I am not sure what should I do, shoul I some forwarding?

I have tried 3 solutions:

Firewalld - does not work at all. After I run this my network stop working:

sudo firewall-cmd --direct --add-rule ipv4 filter FORWARD 0 -o tun+ -j ACCEPT
sudo firewall-cmd --direct --add-rule ipv4 filter FORWARD 0 -i tun+ -j ACCEPT

sudo firewall-cmd --direct --add-rule ipv6 filter INPUT 0 -j DROP
sudo firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -i lo -j ACCEPT
sudo firewall-cmd --direct --add-rule ipv4 filter INPUT 1 -i tun+ -p tcp --dport 443 -j ACCEPT
sudo firewall-cmd --direct --add-rule ipv4 filter INPUT 999 -j DROP

sudo firewall-cmd --direct --add-rule ipv6 filter OUTPUT 0 -j DROP
sudo firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -o lo -j ACCEPT
sudo firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -o tun+ -j ACCEPT
sudo firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -p tcp -m tcp --dport 443 -j ACCEPT
sudo firewall-cmd --direct --add-rule ipv4 filter OUTPUT 999 -j DROP

UFW - works fine with VPN, when I turn on Whonix Gateway it stop working. It seems that kill switch start and it turn off my network:

sudo ufw reset
sudo ufw default deny incoming
sudo ufw default deny outgoing
sudo ufw allow out on tun0 from any to any
sudo ufw enable

I tried vpndemon - I choose to terminate 'NetworkManager' but it does not work. It works when I enter firefox but it is not helpful.

migrated from security.stackexchange.com Mar 17 at 20:31

This question came from our site for information security professionals.

  • This questions is not about security, but about VPN configuration. I am voting to move it. – ThoriumBR Mar 17 at 13:41
  • where should I ask then? – fidos3k Mar 17 at 18:45
  • Superuser or ServerFault. Mods will move it, don't worry. – ThoriumBR Mar 17 at 19:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.