There's a lot of good advice around about avoiding connecting to unsecured wireless networks, and using a VPN (for all traffic) if you absolutely must use one.  What seems to be missing from this advice is the gap between when you connect to the unsecured wireless, and when you've got your VPN connection up and running. This can be a pretty short period, but a lot of software will detect the new network (via some OS event, I guess) and immediately start attempting to reload/reconnect/etc. So the very first thing that happens is various login details and connections occur before you have time to connect to the VPN (since this requires the unsecured wireless first). Likewise, if the VPN connection goes down for some reason, the default route will return to the unsecured wireless.  So is there any way to avoid this unsafe gap? For example, blocking all data that's not going to the VPN server by default.  I'm hoping for a built-in solution rather than 3rd party firewall software, but keen to hear about any options that truly close this gap in security.
122287
As most experienced users will have heard, using a Mac in a public untrusted Wi-Fi can be potentially harmful. A tool like Firesheep has made it very easy to intercept unencrypted communication.  Using a full tunnel VPN to encrypt all communication is as often mentioned as a magical solution to eavesdropping, but of course it's not that easy:   Depending on the protocol and configuration of the VPN connection, the connection may drop easier. (e.g. TLS vs UDP) The VPN connection is not established instantly when you connect to a public network.   I think that the last two points matter a lot because whenever your network settings change the various applications immediately talk to their servers - I assume it's configd that informs them, right?     i.e. Before the VPN tunnel is established, most (running) processes that require   internet will communicate.   I see two components to being a good VPN user:   Making sure things don't get sent in the clear before it's established. .   How can I use VPN on a Mac in a public network to restrict unencrypted traffic before the VPN starts up?
110584
I have a Toshiba z830 with ubuntu 12.04. I could use without problems the DSL connection (I have no router, only a modem) at home until a couple of days ago:   It stopped to work when while connected with the DSL connection via CiscoVPN (to my workplace), I had to leave the laptop unattended for a while and I guess the laptop tried to go to suspend. When I came back there were many messages on a black screen (sorry, I cannot attach an image because of my low reputation) and the laptop was not responding. I had to reset the it.   After rebooting it, the internet connection didn't work as did before (no browsing, no ssh, no skype, etc) although it says it is connected. I only can browse, etc when I connect to CiscoVPN to the same place where I was connected when it crashed.  When I am physically where I connected via VPN (at work) I can use the wireless, which I am not able to use now anymore since the incident described above.  Some additional information:  martillu@ubuntu:~$ cat /etc/resolv.conf   domain km.icrr.u-tokyo.ac.jp   nameserver 10.240.12.134   nameserver 10.240.12.135    martillu@ubuntu:~$ route -n   Kernel IP routing table   Destination Gateway Genmask Flags Metric Ref Use Iface   0.0.0.0 61.127.116.199 0.0.0.0 UG 0 0 0 ppp0   61.127.116.199 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0   169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 ppp0    martillu@ubuntu:~$ ifconfig   eth0 Link encap:Ethernet HWaddr e8:e0:b7:2f:bc:5a   inet6 addr: fe80::eae0:b7ff:fe2f:bc5a/64 Scope:Link   UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1   RX packets:17620 errors:0 dropped:1 overruns:0 frame:0   TX packets:13168 errors:0 dropped:0 overruns:0 carrier:0   collisions:0 txqueuelen:1000   RX bytes:19452232 (19.4 MB) TX bytes:2568218 (2.5 MB)   Interrupt:20 Memory:c0700000-c0720000    lo Link encap:Local Loopback   inet addr:127.0.0.1 Mask:255.0.0.0   inet6 addr: ::1/128 Scope:Host   UP LOOPBACK RUNNING MTU:16436 Metric:1   RX packets:134 errors:0 dropped:0 overruns:0 frame:0   TX packets:134 errors:0 dropped:0 overruns:0 carrier:0   collisions:0 txqueuelen:0   RX bytes:36316 (36.3 KB) TX bytes:36316 (36.3 KB)    ppp0 Link encapoint-to-Point Protocol   inet addr:219.167.252.226 P-t-P:61.127.116.199 Mask:255.255.255.255   UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1454 Metric:1   RX packets:17608 errors:0 dropped:0 overruns:0 frame:0   TX packets:13129 errors:0 dropped:0 overruns:0 carrier:0   collisions:0 txqueuelen:3   RX bytes:18993590 (18.9 MB) TX bytes:2221195 (2.2 MB)    wlan0 Link encap:Ethernet HWaddr 9c:b7:0d:d9:21:f3   UP BROADCAST MULTICAST MTU:1500 Metric:1   RX packets:0 errors:0 dropped:0 overruns:0 frame:0   TX packets:0 errors:0 dropped:0 overruns:0 carrier:0   collisions:0 txqueuelen:1000   RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)    I think that: domain km.icrr.u-tokyo.ac.jp in the resolv.conf may be suspicious, since if I am not connected via CiscoVPN I do not know why it should appear "km.icrr.u-tokyo.ac.jp" (this is where I connect via VPN).
25282
I have two Android smartphones that can provide their internet connection to a computer over USB via the RNDIS (Remote Network Device Interface Specification) protocol. I also have two computers dual-booting Windows 7 Ultimate and some flavor of Linux (one of them has Fedora 17, the other has Ubuntu 12.04).  When I connect either smartphone to either computer and the computer is running Windows, I have to wait about 90 seconds before I can use my internet connection after enabling tethering from the phone.  When I connect either smartphone to either computer and the computer is running Linux, I have to wait about 2.5 seconds before I can use my Internet connection.  My question is, why is there such a ridiculously long delay on Windows?  On Windows, it says "Identifying..." on the adapter for about 60 seconds, then says "Limited Or No Access", then if I keep refreshing my browser, EVENTUALLY it will let me browse. After that it's OK.  On Linux, it connects instantly, just like plugging in an ethernet cable. Boom, done.  I don't think it's hardware related because I have two phones from different manufacturers (Motorola and HTC) running two different versions of Android (2.3.6 and 4.0.4). On the computer side, I have a Lenovo ThinkPad T530 and a hand-made desktop. I've actually tried it on two separate hand-built desktops; one a Nehalem system and one Ivy Bridge. As far as I can tell, they have absolutely nothing to do with one another.  Things I've tried to improve the performance on Windows:   CLEAN install of Windows. Absolutely nothing except base drivers, SP1 and critical updates. No VPN software, no security software, no virtualization software, no custom netfilt drivers whatsoever except those drivers absolutely required to tether to the phone. Unchecking all but TCP/IPv4 in the network connection properties (so unchecking QoS, Client for Microsoft Networks, Link-Layer Topology, etc. Setting static IP and static DNS servers.   None of this helps at all. I simply cannot navigate anywhere on the computer until about 90 seconds after enabling tethering on the phone, and the problem ONLY occurs on Windows. On Linux it's fine.  Pretty stumped about this. For what it's worth my RNDIS driver is version 6.1.7600.16385 and the name is "Remote NDIS based Internet Sharing Device" followed usually by a number like #2, #9, etc. I'm using a genuine copy of Windows in all cases and I've tried both an OEM buildout of Windows from Lenovo (on the ThinkPad) as well as a clean Microsoft install from the retail CD on my desktops.
20072
When I work from home, I am connected to the resources in my company via VPN. In my home network there is a network printer in the same local network.   The problem is that when I open VPN to my company, I cannot access my home network printer any more. So whenever I need to print, I have to disconnect VPN, print, reconnect the VPN. It's extremely annoying.    Is there any solution how to configure the stuff so I can access both the VPN and the home network printer at the same time?  While on VPN, I can normally print to the company printers and access public internet resources.  My network configuration (ipconfig) is like that:  Ethernet adapter Local Area Connection:  IPv4 Address. . . . . . . . . . . : a.b.c.d // my company IP address Subnet Mask . . . . . . . . . . . : 255.255.255.255 Default Gateway . . . . . . . . . : 0.0.0.0  Wireless LAN adapter Wi-Fi:  IPv4 Address. . . . . . . . . . . : 10.0.0.101 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.0.0.138   And I can ping the local gateway 10.0.0.138, however I cannot ping my printer on 10.0.0.3. How is that possible?
965
I need fixed IP in three wireless networks I log in frequently.  It is a pain to set those IP and gateway everytime I change networks.  I am willing to write a script to change my IP and gateway between those 3 fixed IPs and a choice to make it get IP automatically (when I´m in another network).  A plus feature to my script would be if it could discover the wireless network I am logged in and decide the IP automatically.  Is it even possible?  Thanks.
9270
I connect to my company VPN for email, intranet, fileshare etc, but when I'm working I also like to listen to Spotify which is blocked through the company network, so I have to disconnect to the VPN to use it. Is there anything I can do which will enable me to remain connected to the VPN but bypass it for Spotify? I use the Cisco VPN client.
117126
This is a  about IPv6 and NAT Related:       So our ISP has set up IPv6 recently, and I've been studying what the transition should entail before jumping into the fray. I've noticed three very important issues:  Our office NAT router (an old Linksys BEFSR41) does not support IPv6. Nor does any newer router, AFAICT. The book I'm reading about IPv6 tells me that it makes NAT &quot;unnecessary&quot; anyway.  If we're supposed to just get rid of this router and plug everything directly to the Internet, I start to panic. There's no way in hell I'll put our billing database (With lots of credit card information!) on the internet for everyone to see. Even if I were to propose setting up Windows' firewall on it to allow only 6 addresses to have any access to it at all, I still break out in a cold sweat. I don't trust Windows, Windows' firewall, or the network at large enough to even be remotely comfortable with that.  There's a few old hardware devices (ie, printers) that have absolutely no IPv6 capability at all. And likely a laundry list of security issues that date back to around 1998. And likely no way to actually patch them in any way. And no funding for new printers.   I hear that IPv6 and IPSEC are supposed to make all this secure somehow, but without physically separated networks that make these devices invisible to the Internet, I really can't see how. I can likewise really see how any defences I create will be overrun in short order. I've been running servers on the Internet for years now and I'm quite familiar with the sort of things necessary to secure those, but putting something Private on the network like our billing database has always been completely out of the question. What should I be replacing NAT with, if we don't have physically separate networks?
86056
I tried to post to this thread  for if I understand their question I am having the same problem, but the answer option won't work for.  After suspend, the wireless is disconnected and the only way to get it to reinitialize/be recognized is to do a full restart.  At first I thought it was my gnome-shell (for lock screen disappeared there with 13.10), but when I switched to the default Ubuntu it's still doing it and it's kinda driving me nuts for I have to reopen all my files and browsers/tabs/windows every time. I don't know how to show the terminal stuff the above asker shows, but it sounds like the same issue and it only started with 13.10 upgrade a few days ago.   Any help would be much appreciated!!! -- Thanks so much, ser.
59903
I have two network cards. If I connect to a network using VPN then to access other websites I have to pass through a proxy server.  Is it possible to use my other network card to connect to the Internet directly without passing through the proxy?
89627
right now when I connect to my VPN, my internet is served from my home router, but any requests for xxx.xxx.xxx.xxx i.e. my works ip range are served via the vpn connection I believe.  How can I force all traffic to the vpn?
55196
I use the built-in VPN on Mac OS X 10.7.3. It's IPSec, FWIW. From time to time, it disconnects (probably an issue with my corporate server). Is there a way to get it to automatically reconnect? Sometimes I don't notice for a while, which is kinda annoying.
87402
I have an OpenVPN config that I use on my Windows XP box and on my Ubuntu machine.  When I use it with my Windows machine, I can connect to the VPN and access sites on the VPN, and the internet as normal. When I use it on my Ubuntu box, when connected to the VPN, I can only access internal sites - No internet access at all.  I'm sure there is a way to configure OpenVPN on Ubuntu to allow internet connections, but I can't figure out how.
99162
My parents use a Win7 laptop. I have set it so that they are not administrators of the device, only I am. I have installed OpenVPN for them to access the home network resources when they are out. The problem is they cannot start the client without admin privileges, since the route cannot be added to the system without.   I made a workaround by letting the OpenVPN client start from scheduled tasks with a trigger when somebody logs in. That works while they're out, but breaks their network connectivity at home. On top of that, since the client is at that time started as a different user, the UI is not visible.  What would be the best way to provide them with the OpenVPN client, without giving them more privileges?
65571
The connection to my work wifi just failed and below the network my phone is saying "Avoided poor Internet connection". What does this mean exactly? Has the phone detected that it can't get out to the wider Internet or did the network fail to allocate an IP address or something else?  Not sure if it matters but this is on a Galaxy Nexus.
77566
As stated above, I can't connect to my home wi-fi with natty but can with Windows 7. The strange thing is I that I have gotten it to connect to other password protected networks with natty, it's just mine that it dosn't like.   I am using a WPA2 pass-code with AES Encryption and all other devises work fine on my network. Laptop used is a Dell Latitude D430.
49889
Connecting to the wireless is relatively simple.  After some struggle, you have wifi in your installer. You can install Ubuntu Server and everything is alright. You are ready to boot your new system.    After setup finished, wifi settings disappeared.  tl;dr: How do I connect to a wireless (WPA2 Personal) network from Ubuntu Server 12.10?    What I have tried so far:  Connected with iw* commands. Obtained IP address with dhclient. Put these commands to etc/rc.local.  On boot, the server waits 120 seconds with message "Waiting for network to come up"  To fix this, I removed everything /etc/network/interfaces (wpa-psk and wpa-ssid). This did not work. It was still waiting. I found an answer, which said I could just remove the /etc/... (the file that was in charge of the 120 second wait time.)    I did that, and kept a backup of it. Now the server waits ~3 seconds (modified sleep within the file) and boots up. However, there's no network connection available. It's some dhcp error.  As I was out of options, I tried using the one in comment. The one that used "tee". Turns out it does not work either.    How can this whole thing be so inconsistent? How can they not install the firmwares on the ISO while it would perfectly fit (673+~10MB = 683). How can the installer NOT copy the necessary files and set up the connection to be used later? (Or ask if the user wants to use it.)
108960
My home PC has a VPN connection to my office. The office network is firewalled, with a secure zone on 192.168.0.* and a DMZ on 10.0.0.*   From outside, www.mycompany.com routes to a public IP - say 1.2.3.4. Our firewall NATs that to 10.0.0.4. From within the office LAN, we use DNS records on our domain controllers to resolve www.mycompany.com straight to 10.0.0.4, because we can't route to the public interface of our own firewall.  When I connect the VPN from home, I get a 192.168.0.* IP assigned via DHCP, but because I'm not using the VPN as my default gateway, I can't route to 10.0.0.* addresses unless I manually add a route.  I've created a persistent route to pass traffic for the 10.0.0.* subnet via the default gateway on the secure firewall zone:  route add -p 10.0.0.0 mask 255.255.255.0 192.168.0.1   Here's the problem. When I reboot, the route still appears in the routing table - fine. If I then connect the VPN, the route appears, but doesn't work - I can't route to anything on the 10.0.0.0 subnet. BUT, if I remove and then re-add the route AFTER the VPN is connected, it works fine.  I have no idea why this is the case. The before/after configuration is IDENTICAL - same IP, same route table - but if I create route then connect, it fails; if I connect the VPN and then create the route, it succeeds.  Looking for any tips as to how I can either stabilize the configuration, or automatically create the route when the VPN connects?