Access Local Network, Host or Clearnet Internet from VM
From Whonix
(Redirected from Access Local Network or Host from VM)
Introduction[edit]
This is an esoteric subject and the instructions are probably unnecessary -- advanced users only!
File Transfer might be a far simpler alternative.
Prerequisite Knowledge[edit]
Instructions[edit]
The following example uses ssh, but it could be replaced with something else.
If ssh is utilized, its setup on the host (such as public key setup) and related issues are out of scope for this documentation and are considered prerequisite knowledge. This wiki chapter is focused on connectivity and not server configuration details.
- These instructions only apply to Whonix-Gateway ™.
- Whonix-Workstation ™ is currently Undocumented. It would likely require a complex setup and pose a high risk of clearnet leaks; see footnote. [1] Instead of using these instructions it is recommended to consider SSH / SSHFS (ssh file system) into Whonix-Gateway ™, SSH / SSHFS into Whonix-Workstation ™, and SSHFS into Whonix-Workstation ™.
On the Host[edit]
Install the server software. Note: ssh is used as an example but can be replaced with alternatives.
Install ssh.
1. Update the package lists.
sudo apt-get update
2. Upgrade the system.
sudo apt-get dist-upgrade
3. Install the ssh package.
Using apt-get command line parameter --no-install-recommends is in most cases optional.
sudo apt-get install --no-install-recommends ssh
The procedure of installing ssh is complete.
Inside the VM[edit]
Install the client software. Note: openssh-client is used as an example but can be replaced with alternatives.
1. Install openssh-client.
Install openssh-client.
1. Update the package lists.
sudo apt-get update
2. Upgrade the system.
sudo apt-get dist-upgrade
3. Install the openssh-client package.
Using apt-get command line parameter --no-install-recommends is in most cases optional.
sudo apt-get install --no-install-recommends openssh-client
The procedure of installing openssh-client is complete.
2. Optional: Create a persistent home folder for user clearnet.
sudo usermod -d /home/clearnet clearnet
sudo mkhomedir_helper clearnet
3. Open a shell under user clearnet.
sudo -u clearnet bash
4. Permanently disable stream isolation or temporarily circumvent stream isolation.
Syntax:
client-software ip-address
In the following example, note:
- Replace
sshwith the desired client software. - Replace the IP
192.168.1.0with the actual local LAN IP of the host. - Drop
.anondist-origif the command is not uwt-wrapped by default.
ssh.anondist-orig 192.168.1.0
Troubleshooting[edit]
- A configured host firewall might block connections to the service.
See Also[edit]
Footnotes[edit]
- ↑
It would probably require:
- Less safe: enabling IP forwarding inside Whonix-Gateway ™; or
- Safer: Opening an Incoming Port on Whonix-Gateway ™ Firewall and running some kind of proxy software in Whonix-Gateway ™ with user
clearnetthat permits forwarding to host, local area network or clearnet Internet.
Whonix ™ is Supported by Evolution Host DDoS Protected VPS. Stay private and get your VPS with Bitcoin or Monero.
|
|
| Fosshost | About Advertisements |
Search engines: YaCy | Qwant | ecosia | MetaGer | peekier | Whonix ™ Wiki
.svg.png&filetimestamp=20200623163525&){kind=small}
Please contribute by helping to answer Whonix ™ questions.
Priority Support | Investors | Professional Support
Whonix ™ | © ENCRYPTED SUPPORT LP | 
Freedom Software / 
Open Source (Why?)
The personal opinions of moderators or contributors to the Whonix ™ project do not represent the project as a whole.