On Wednesday, 26 August 2020 at 11:00:36 UTC+8 [email protected] wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > On 8/22/20 10:10 AM, unman wrote: > > To deal with the question here, I use debian minimal templates > > extensively, (NOT with qubes-vm-hardening), and have never seen > > this issue - neither the unreliable firewall nor the warning > > prompts issue. I've asked fellow users who also use debian-minimal > > and they do no not recognise the issue. > > As mentioned earlier ... I have seen it. Both with debian-10-minimal > and debian-10-minimal + kicksecure. However, just like before... when > I retraced my steps the problem went away. > > I suspect that maybe one of the packages that need to be installed > runs a post-install script that sometimes fails (I have no proof). > > Another thing that caused many issues for me (until I recognized and > fixed it) was that the time in my sys-net was wrong. > > Sorry, got no answers... just observations. > > /Sven > > - -- > public key: https://www.svensemmler.org/0x8F541FB6.asc > fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6 > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEE18ry22WNibwI1qeq2m4We49UH7YFAl9F0CQACgkQ2m4We49U > H7YfYBAAjlyS/ehbhbztuYNMMqU7HLoUk3LGCwJpBoe67Nz5+DB1H3gbM7l9T1xc > 7opa7aRbOUa1aI88sZUuOgFhvQHbokho9X9ebbADjjTYQHhiiBXqO3pULgh+P8+g > jHCObPgID/OX7ceiS7hp7Cy+SiDm1ZrUQIdSFlCduZJYC44a6BauSaF5P9o+fpnq > FlFSbLGq1XyLQcKtr6Gl5rgYVa52UfTWzKt9+TGzIyAV/TRbLisInvI9RhkmVBvj > yMJYbgYsjyjKLqFMvLzeMeeJoriHzNzWz6Zqwbmw6NXkGFAqmqCSfYLyLprgnPyf > g8DGkGhRmp9awK77C8HfruqyfADPsdXYrHdVxBJbiSOB7CKbst3ZIBCVvVfwD0oY > 8DGNXAfP5hN7wWuRas6IshRArgk0ujuU0uR8EQpOMgI/qutZYY1LiA8BQ0o7RhUf > o3Rc4JM4lU10EQPafZOeWDQueD4v837dd5IkCuNKeidRmCvFzIHu7/SJFlOvnbWB > PNi23k3Hxx8x5hHDUDK72tXcEWawdiUJ6NMfmQG31N/zptBu8FGBFROn8Ww+XJRb > ePIfHmcsdNJFekWzDe4Fa8B2EpioL4QJ8Gcqy3rFmn7ZQ870prAOpT8WbNYk49BW > fgd/H8PBXB09aa0oHYc2KBGphrbXToIDlBLULCe5HeCKxtp/tj0= > =hvfa > -----END PGP SIGNATURE----- > Hi Sven, Thanks for returning to this thread. As per unman's request, I have continued the discussion at the discourse.groups forum ( https://qubes-os.discourse.group/t/debian-10-minimal-firewall-issues/146/7). My sys-net time has also slipped, like yours, on occasion. Sometimes it's 12+ minutes behind. This is apparently a common issue that's due to be fixed (https://github.com/QubesOS/qubes-issues/issues/4939), so if this was a cause of firewall issues, more people should have noticed it. Also, unman correctly pointed out that I misspoke when I said that my issues are the same as yours, as you seem to focus on the warning prompt that shows when attempting to edit firewall rules, while I have that problem plus qubes-firewall.service being unreliable. Anyways, as a non-technical user, I'm in the same boat as you--no answers, just observations. I managed to get Mirage firewall <https://github.com/mirage/qubes-mirage-firewall> running and I highly recommend it to you in particular since it takes a lot of uncertainty out of the issue while being easy to use. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a9379287-0b26-4a1d-9c93-8a82ef7f06bbn%40googlegroups.com.
