How to restrict traffic through firewall, on a single cube, only to few particular sites?

[yanakieff]

Thanks @fsflover, I was hoping for an alternative solution.

@BEBF738VD How did you achieve it? How to find which hosts a domain connects to?

@unman I checked generic websites like facebook, feedly, etc., so I can test. What I got is feedly connect without problems, facebook stop loading with fbcdn.net showing in the loading bar then just show plain non stylized text, other sites directly show me “Unable to connect”, like the ones not in the firewall settings.

This is due to what you mentioned, but I will quote a clearer explanation:

@Rooftop

The main difference is that with tinyproxy you whitelist sites by hostname/domain name, whereas qubes firewall whitelists by IP address (you can enter a hostname, but it is converted to an IP address when the configuration is saved). This means that if the hostname can resolve to multiple IP addresses (which is the case for websites behind CDN’s or load balancers) then tinyproxy will work, whereas the qubes firewall may work, but may also fail intermittently.