## Copyright (C) 2012 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.

#### meta start
#### project Whonix
#### category networking
#### non_qubes_whonix_only yes
#### gateway_only yes
#### description
## network interfaces configuration eth0 (external network interface) and eth1 (internal network interface)
##
## static network configuration
##
## IP HARDCODED below but comment only. No need to change.
## eth0
#address 10.0.2.15
#netmask 255.255.255.0
#gateway 10.0.2.2
##
## eth1
#address 10.152.152.10
#netmask 255.255.192.0
#### meta end

## for more information see interfaces(5)

## Loopback interface.
auto lo
iface lo inet loopback

## When using Virtual Machines (not Physical Isolation),
## - eth0 is the NAT interface to communicate with VirtualBox
## - used to get access to the internet
## - it will get an IP address such as 10.0.2.15
## - Thus, the this IP address can NOT cause conflicts
##   with your LAN network or router.
## We no longer use DHCP.
## https://forums.whonix.org/t/securing-removing-dhcpclient-from-gw-was-netstat-gateway-log/18848
#auto eth0
#iface eth0 inet dhcp

## NAT interface to communicate with VirtualBox.
## IP HARDCODED
auto eth0
iface eth0 inet static
        address 10.0.2.15
        netmask 255.255.255.0
        gateway 10.0.2.2
        ## broadcast required?
        #broadcast 10.0.2.255

## IPv6 autoconfiguration does not appear to require DHCP.
iface eth0 inet6 auto

## When using Virtual Machines (not Physical Isolation),
## - eth1 is an internal, isolated, virtual network,
## - provided and only visible inside Virtual Machines
## - solely used to communicate with the Workstation.
## - it has has no access to the host
## - Thus, the following IP address can NOT cause conflicts
##   with your LAN network or router.
## IP HARDCODED
auto eth1
iface eth1 inet static
       ## INT_IP and INT_IF
       address 10.152.152.10
       netmask 255.255.192.0
       ## Out commented.
       ## For what do we need network and broadcast anyway?
       #network 192.168.0.0
       #broadcast 192.168.0.255

iface eth1 inet6 static
    address fd19:c33d:88bc::10
    netmask 96