How to add complex sites to firewall?

[fsflover]

Restricting a qube to selected websites

A common requirement seems to be the ability to restrict a qube’s access to a certain subset of websites; something that is difficult to achieve using the firewall rules due to multi-hosted websites/CDN’s etc. The following is a description of one way to setup a qube with restricted website access using only software that is already installed in Qubes OS. Create a qube based on template:fedora-32 or fedora-33, lets call it my-proxy. Set its networking to sys-firewall. [Screenshot_2021-03-12_1…

Firewall VM with Custom Rules behind a VPN = No Internet

This thread has been difficult to follow, and I don’t have any experience using a VPN with Qubes, so there’s not much I can add to what @unman has already said. However, I’ll add some foundational knowledge that I’ve learned when it comes to using firewall rules: Firewall rules for “someqube” are enforced on the netvm/proxyvm that “someqube” is connected to. That netvm/proxyvm qube must have the ability to resolve hostnames, or it will not allow traffic from “someqube” to flow. If your goal …