Easy hardening for beginners

[fsflover]

@dallas87

I’d like to understand more about firewall rules and how can I block certain domains [like all google domains] from a certain qube.

Restricting a qube to selected websites

A common requirement seems to be the ability to restrict a qube’s access to a certain subset of websites; something that is difficult to achieve using the firewall rules due to multi-hosted websites/CDN’s etc. The following is a description of one way to setup a qube with restricted website access using only software that is already installed in Qubes OS. Create a qube based on template:fedora-32 or fedora-33, lets call it my-proxy. Set its networking to sys-firewall. [Screenshot_2021-03-12_1…

@sadja

Would you say a lot of qubes os hardening isn’t implemented by default due to the lack of resources?

@adw

No, not a lot.

Although Qubes OS implements more hardening than any other system, I respectfully disagree here. A lot more can be done by default as mentioned here, and in very, very, very, very, very, very many Github issues, along with adding many more OSes to improve the security through compartmentalization.

Not all of those things may be helpful to newbies, some may complicate the usage of Qubes OS. But it’s, in principle, always beneficial to add a GUI somewhere with such hardening options.