Application firewall

[Zrubi]

I was very surprised that application firewall feature isn’t mentioned anywhere

See my PoC here:
http://zrubi.hu/en/2017/traffic-analysis-qubes/
(and note the date

and a recent topic here:

Intrustion Detectors in dom0: bad idea?

Continuing the discussion from Running AIDE in dom0: I’ve seen couple of times users talk about installing IDEs (Intrusion Detection Systems) in dom0 and I wanted to start a discussion on this to see people’s takes on it.

and just for the record: the default Qubes Firewall:

Firewall

(but this is based on IP/Port fitlerering only)