sudo apt-get update/install not working

Support
1

My setup is TOR->VPN->Web
It works for almost all sites but some not working, whoer.net for example
But those sites are available when connecting from my host via the same VPN provider.

And I can not install any apps - seems like no connection to security.debian.org and other servers.
security.debian.org is accessible in IceWeasel.
user@host:~$ sudo apt-get update
0% [Connecting to security.debian.org] [Connecting to ftp.us.debian.org] [Connecting to www.whonix.org]

Sometimes it manages to make some connections and then freeses again -

user@host:~$ sudo apt-get update
[sudo] password for user:
Ign http://security.debian.org jessie/updates InRelease
Ign http://ftp.us.debian.org jessie InRelease
Ign http://www.whonix.org jessie InRelease
Err http://security.debian.org jessie/updates Release.gpg
Something wicked happened resolving ‘security.debian.org:http’ (-4 - Non-recoverable failure in name resolution)
Err http://ftp.us.debian.org jessie Release.gpg
Something wicked happened resolving ‘ftp.us.debian.org:http’ (-4 - Non-recoverable failure in name resolution)
Err http://www.whonix.org jessie Release.gpg
Something wicked happened resolving ‘www.whonix.org:http’ (-4 - Non-recoverable failure in name resolutio
18% [Connecting to security.debian.org] [Connecting to ftp.us.debian.org] [Connecting to www.whonix.org]

2

If you set up your VPN correctly in Whonix-Workstation, then any website you visit should only ever see your VPN’s IP address - meaning these symptoms would have nothing to do with Whonix or Tor. Either you misconfigured your VPN / Whonix or it’s something completely unrelated (ie website is down).

Based on your other thread, I assume you are using TUNNEL_FIREWALL in Whonix-Workstation.

Your result is expected since apt-get is preconfigured to use stream isolation. ( Stream Isolation ). You have 2 options:

  1. Open /etc/whonix_firewall.d/30_default.conf and read the comments related to TUNNEL_FIREWALL_ALLOW_LOCAL_NET. If you understand and want to enable that option, then make the change to your user firewall configuration file (/rw/config/whonix_firewall.d/50_user).

  2. Un-torrify apt-get: Stream Isolation

Incorrect. Torrified apt-get will never be able to connect through your VPN. Ign stands for Ignore, meaning that line in your apt.sources file is being skipped.