Bridge Firewall

[texasbilly]

@apparatus

@texasbilly

But I would like to know if turning on the disable-dns-server service or blank /etc/resolv.conf would be needed as well (qvm-service sys-whonix-firewall disable-dns-server on).

I don’t think it’s needed.

I’m just asking because @unman said it was required in the post below. If he can also confirm, that would be great

[qubes-users] Safely set up a Qube to connect to only one IP address on the Internet

These are good. Disable all unnecessary services in the qube - that means almost all of them. Change the nft/iptables configuration on the qube itself - note that you can do this in `/rw/config/rc.local` but that is processed after the network comes up. You want to allow only outbound lo and to your target. Remove/overwrite /etc/resolv.conf You can also create an alias in /etc/hosts to avoid typing out the full IP address.