Editing templateVM /etc/hosts to block website

[KitsuneNoBaka]

Maybe because 127.0.0.1 is internal communication IP and there is somewhere startup script that ensures /etc/hosts in templates is generic.
If you want to do it for appVM then do it in appVM but in /rw/ and by bind-dir mechanism.

If you want to block sites use sys-firewall or use @solene sys-proxy-out solution

URL filtering HTTPS proxy

Introduction This guide is for users who want to let a qube access some specific websites, but not the entire Internet. It’s especially useful when using the Qubes firewall isn’t enough — for example, when websites change their IPs often, making domain-based rules unreliable. This guide assumes you know what an HTTP(S) proxy is, and that you’re comfortable using the terminal to run commands or edit files. The setup will create a sys-proxy-out qube that filters access to a list of all…