ubuntu-phone team mailing list archive
-
ubuntu-phone team
-
Mailing list archive
-
Message #20979
OpenVPN
With the new OTA-11 and Username/Password working (1567389
<https://bugs.launchpad.net/ubuntu/+source/indicator-network/+bug/1567389>)my
vpn tunnel is operational. I was surprised to find the config file
writable (/etc/NetworkManager/system-connections/) and I had to edit it
with auth=SHA512 to get it working. Now I'm having some side affects.
I've also enabled ufw with :
phablet@ubuntu-phablet:/etc/NetworkManager/system-connections$ sudo ufw
status verbose
Status: active
Logging: on (medium)
Default: deny (incoming), deny (outgoing), disabled (routed)
New profiles: skip
To Action From
-- ------ ----
22 ALLOW IN 192.168.XX.XX
XXX.XXX.XXX.XXX ALLOW OUT Anywhere #To VPN
Anywhere ALLOW OUT 10.33.0.0/16
I can turn the vpn on/off with the toggle in Settings tab and all
connections are blocked except those that travel the tunnel. I'm
getting this in the ufw.log file:
UFW BLOCK] IN= OUT=wlan0 SRC=fe80:0000:0000:0000:b69d:0bff:fe4f:ffb9
DST=ff02:0000:0000:0000:0000:0000:0000:0002 LEN=48 TC=0 HOPLIMIT=255
FLOWLBL=0 PROTO=ICMPv6 TYPE=133 CODE=0
1> Is there anyway to disable IPv6? I would expect to see an option in
WiFi settings... but surprisingly there are no WiFi options at all.
2> I'm seeing unusually long times checking for Updates (on vpn). I get
a Software Up to Date confirmation, but I suspect it is just a time-out
default message. I'm currently at about 5 minutes Checking for updates.
Off the vpn (ufw disable) it takes 5 - 10 seconds.
3> The vpn may have caused the app store purchase failure that I already
posted about earlier today.
Otherwise things seem to be working well.
~Will Atwood
Follow ups