← Back to team overview

ubuntu-phone team mailing list archive

OpenVPN

 

With the new OTA-11 and Username/Password working (1567389
<https://bugs.launchpad.net/ubuntu/+source/indicator-network/+bug/1567389>)my
vpn tunnel is operational.  I was surprised to find the config file
writable (/etc/NetworkManager/system-connections/) and I had to edit it
with auth=SHA512 to get it working.  Now I'm having some side affects. 
I've also enabled ufw with :

phablet@ubuntu-phablet:/etc/NetworkManager/system-connections$ sudo ufw
status verbose
Status: active
Logging: on (medium)
Default: deny (incoming), deny (outgoing), disabled (routed)
New profiles: skip
To                         Action      From
--                         ------      ----
22                         ALLOW IN    192.168.XX.XX
XXX.XXX.XXX.XXX            ALLOW OUT   Anywhere #To VPN
Anywhere                   ALLOW OUT   10.33.0.0/16

I can turn the vpn on/off with the toggle in Settings tab and all
connections are blocked except those that travel the tunnel.  I'm
getting this in the ufw.log file:
UFW BLOCK] IN= OUT=wlan0 SRC=fe80:0000:0000:0000:b69d:0bff:fe4f:ffb9
DST=ff02:0000:0000:0000:0000:0000:0000:0002 LEN=48 TC=0 HOPLIMIT=255
FLOWLBL=0 PROTO=ICMPv6 TYPE=133 CODE=0

1> Is there anyway to disable IPv6?  I would expect to see an option in
WiFi settings... but surprisingly there are no WiFi options at all.

2> I'm seeing unusually long times checking for Updates (on vpn).  I get
a Software Up to Date confirmation, but I suspect it is just a time-out
default message.  I'm currently at about 5 minutes Checking for updates.
Off the vpn (ufw disable) it takes 5 - 10 seconds. 

3> The vpn may have caused the app store purchase failure that I already
posted about earlier today.

Otherwise things seem to be working well.  
~Will Atwood





Follow ups