Tails

#2 Updated by intrigeri 2014-07-31 14:29:13

I doubt we can do anything on our side. I wouldn’t find it crazy that the VirtualBox bridge has some kind of MAC filtering, and that might be a feature. Given that there’s a workaround (that is actually: using the default network config, IIRC), I think it’s worth documenting in known issues, and that’s all.

#3 Updated by BitingBird 2014-07-31 14:38:08

Documenting it in known issues seems right to me. If everyone agrees, we can remove anonym from assignee :)

#4 Updated by sajolida 2014-08-01 15:07:18

> I doubt we can do anything on our side. I wouldn’t find it crazy that
> the VirtualBox bridge has some kind of MAC filtering, and that might
> be a feature. Given that there’s a workaround (that is actually:
> using the default network config, IIRC), I think it’s worth
> documenting in known issues, and that’s all.

Shall we wait for anonym to confirm that there is nothing we can do? He
faced this issue already I think and might be interested in having a look.

Then I’m ok to document this and be done with it. It matches our
promises with regard to MAC spoofing: « On some network interfaces, MAC
address spoofing is impossible due to limitations in the hardware or in
Linux. Tails temporarily disables such network interfaces. You might
disable MAC address spoofing to be able to use them. »

#5 Updated by kytv 2014-08-02 19:03:48

BitingBird wrote:
> Documenting it in known issues seems right to me. If everyone agrees, we can remove anonym from assignee :)

+1 on adding it to “known issues”.

#7 Updated by soulplane11 2014-10-01 20:51:02

I had this problem as well. If Tails can detect that it is in a virtual machine can’t it also detect this condition and notify the user? “Tails has detected you are running it in VirtualBox with a bridged network adapter. Tails cannot use that configuration to connect to the internet when MAC spoofing is also enabled. You can either click here to disable MAC spoofing or set your VM’s network adapter to NAT and reboot.”

#9 Updated by sajolida 2014-10-02 10:24:34

That make sense. I created Feature #7995 to track that proposal.

#10 Updated by anonym 2014-10-02 13:50:14

I can’t reproduce it (with Debian’s wheezy-backports package, 4.3.14-dfsg-1~bpo70+1), but I did experience a transient issue with VirtualBox very similar to this when developing the MAC spoofing feature although I had it both with NAT:ed and bridges networking. There’s commit ee1aa9821d28a31c0173745be16f16675a45f763 in Tails Greeter’s Git repo which implements something like what is requested by soulpane11. It was reverted, however, since I’ve never was able to reproduce the issue after rebooting (or whatever) and haven’t seen it for a year now.

#12 Updated by intrigeri 2014-10-26 16:27:12

sajolida asked me to give my opinion on this ticket, so here I am. However:

• I’ve already given my opinion in comment 2; I still think it’s good enough, and anything more involved would be a waste of our time
• last change on this ticket is by sajolida, who reassigns to himself and says he’ll test it

So, I should do something, please clarify :)