I have a qube that is configured to only allow connections to 1 local IP address on any port/protocol. While I cannot browse the web in that qube I’m still able to ping any IP address or domain so the firewall isn’t working.
If you configured this using the GUI, then read the NOTE at the bottom. All DNS requests and ICMP will be allowed. For mor granular control, use the command line tool qvm-firewall
If you used qvm-firewall you would have seen these rules, and should
delete them