Firewall rules not working for VPN's on disposables

User Support
1

Hello,

I’m currently following Solene’s guide to set up a Mullvad/Proton VPN, but I’m configuring everything within a disposable template that I’ve created and running the vpn’s on disposables. The package installations are being done through the Debian 12 minimal template.

I’ve implemented the killswitch firewall rules in /rw/config/qubes-firewall-user-script using the nftables rules from the guide, and I’ve also enabled the qubes-firewall service. When I check the status with systemctl status qubes-firewall, it shows that the rules are applied. However, I’m still able to access the network, which shouldn’t be the case.

Does anyone have suggestions on why the firewall rules might not be working? I’ve verified all the necessary dependencies, but I feel like I might be overlooking something.

Thank you!

2

Can you post the rules that you have applied? (As an email user, I dont
see updates to guides.)

Have you actually checked the ruleset with nft list?

I never presume to speak for the Qubes team. When I comment in the Forum I speak for myself.
3

Hi,

I don’t use minimal templates, but maybe the are missing a package to work correctly after following the guide?

4

Hello, I misunderstood the firewall rules. I thought it was blocking the network within the VPN qube itself, but it actually blocks clearnet traffic outside the qube.