Network lock disables kvm networks

[89039sa 1]

I'm using virt-manager and all my created networks stop working when i enable the network lock. Is there some script I could run to renable the networks with the network lock enabled? 

 

[Tech Jedi Alex 1574]

You don't need scripts for this, just a few firewall exceptions. NetLock allows connections to AirVPN servers and, depending on the config, to/from your local network only and blocks everything else. To allow the network libvirt opens, something like this in Eddie Preferences > Routes will help:

IP/Host/Range: <the network range libvirt is configured to use>
When connected: Outside the tunnel
Notes: <some description for you, it's not processed>

.

[cheeze 9]

On 11/22/2020 at 8:54 PM, Tech Jedi Alex said:

You don't need scripts for this, just a few firewall exceptions. NetLock allows connections to AirVPN servers and, depending on the config, to/from your local network only and blocks everything else. To allow the network libvirt opens, something like this in Eddie Preferences > Routes will help:

IP/Host/Range: <the network range libvirt is configured to use>
When connected: Outside the tunnel
Notes: <some description for you, it's not processed>

.

Has anyone tested this?
It didn't work for me.

[iwih2gk 100]

I found this frustrating a year or so ago.  I was trying to use kvm for my virtual machines.  The KVMs worked flawlessly  without Eddie but that is my VPN.  Anytime I mounted Eddie my firewall was dead in the water.  My conventional VMs are slower using VBox but they work flawlessly and I got tired of attempting to get the nework lock to play well with  KVM.  My crappy answer was to go buy major hardware upgrades so the speed difference was made up for by hardware "power".  Don't know if I ever want to go back to that soooooooooooooooooo frustrating experience.  I even had some great members here PM to offer private customization but the process was freaking beyond crazy.  So I just stick with VBox and the simplicity is better for me than the alternative.

[cheeze 9]

Yes, I understand from researching this that some other VPN's suffer the same issues. 
It seems when a VPN rewrites the firewall it overwrites the rules libvirt needs to make the NAT connection or maintain the same if the NAT was established before the vpn was was put into service with a network lock enabled.


 

[Tech Jedi Alex 1574]

Thing is, the alternative, which is merging firewall rules, does not guarantee a solid Network Lock. It's a difficult problem to tackle.