Difference between "default (sys-firewall)" and "sys-firewall"

Can anyone elaborate? I read in some guide one should replace “default (sys-firewall)” with “sys-firewall” but I would like to know what’s the difference and when I should use the one and when the other…

Thank you!

The default net qube value is set in Qubes Global Config → Genaral Settings tab → Default net qube.
If you set the testqube net qube to “sys-firewall” then if you change the “Default net qube” from sys-firewall to e.g. sys-whonix then the testqube net qube will still be “sys-firewall”.
If you set the testqube net qube to "default (sys-firewall)” then if you change the “Default net qube” from sys-firewall to e.g. sys-whonix then the testqube net qube will be sys-whonix ("default (sys-whonix)”).

3 Likes

That makes sense, so if don’t want to get unexpected behavior I should set it always to the specific net cube without “default” prefix.

Yes.

It depends what you consider “expected behavior”.