Easiest way to substitute default firewall rules?

[deeplow]

Did you have the chance to read this thread:

How is the QubesOS firewall implemented?

I have successfully created firewall rules by the two methods in QubesOS: qvm-firewall - the python script in the host OS (dom0) which writes to /var/lib/qubes/appvms/<vm-name>/firewall.xml and outputs my rules with: qvm-firewall <vm-name> list The GUI: Qubes Settings > Firewall Rules But I cant find information in the docs on how and where my rules are then implemented. Iv been looking in iptables -L -v on the relevant netVM and even in the appVM and I dont see the implementation of the …

It might provide some insights.