Leak proof VPN set up?

[anon93834559]

@fiftyfourthparallel

One simple method is to configure the firewall that sits between sys-net and your vpn qube to only allow IP addresses of your VPN service. This way, if the connection fails, then any traffic attempting to reach sys-net will be blocked by the firewall since they won’t be attempting to reach the VPN’s IP addresses. This should function as a rudimentary kill switch of sorts.

But how? Can I do this from sys-firewall settings in gui? And what is the format in this box? And don’t I have to also block DNS and mask?

Edit: I think I found the solution via Micah’s blog suggested by Sven, to save you from the expense, please don’t break your neck doing a full write on my behalf! But thank you setting me in the right direction. See Svens suggestion here: PSA: using a VPN under Qubes for Dummies - #5 by Sven