(??) Qemu + openvpn + external proxy (??)

[mel_82]

A quick explanation of the quest: I need to reach from a qemu VM an openvpn server on the host machine, and then to reach the internet through the openvpn tunnel and through the proxy that rules the local network..

It's a bit tangled, I know it, but I can't do nothing to find an easier solution (don't mind the vpn tunnel, that's the only thing I know how to do, and it's the main goal of the whole thing, for test/research pourpose).

Now, I immediatly stopped right on the first problem: I can't reach the local net from the qemu VM.

I've done the following:

• installed qemu (latest version form qemu site, not from portage) with kqemu
  
• installed vde (emerged)
  
• modified /etc/conf.d/net by adding following code and started net.tun0
  

  Code:

  config_tun0=( "10.0.5.1" ) preup() {         if [ "$IFACE" == "tun0" ]         then                 if [ -S /tmp/vde.ctl ]                 then                         rm /tmp/vde.ctl                 elseif [ -e /tmp/vde.ctl ]                         eerror "/tmp/vde.ctl exists, but is not a socket"                         return 1                 fi                 vde_switch -tap $IFACE -daemon                 chmod 777 /tmp/vde.ctl                 return 0         fi         return 0 } postdown() {         if [ "$IFACE" == "tun0" ]         then                 if [ -S /tmp/vde.ctl ]                 then                         einfo "Removing /tmp/vde.ctl socket"                         rm /tmp/vde.ctl                         return 0                 fi         fi         return 0 }

  
  

• Code:

  # echo "1" >/proc/sys/net/ipv4/ip_forward

  
  

• Code:

  # iptables -t nat -A POSTROUTING -o eth0 -s 10.0.5.0/8 -d 0/0 -j MASQUERADE

  
  

• Code:

  # /usr/local/bin/qemu -hda qemu/test_client -cdrom /home/mel/install-x86-minimal-2005.1.iso -boot d

  
  

Now I have, on the host machine:

[neonknight]

Why dont' you bridge eth0 and tun0, so qemu will be in the same network as your physical computer?

[mel_82]

Beacuse I am not the lab admin, and the lab network is managed by a dhcp that assigns IPs only at certain MACs, that are known to be the only allowed machines.

ps: I'm sorry for my terrible spaghetti-english, but it's the best I can manage to do without a heavy use of the google translator
_________________
http://www.feelingsofgreatness.net

[mel_82]

UP!
_________________
http://www.feelingsofgreatness.net