Manual DNS for sys-firewall2

[ceomi]

hi I want to use different DNS configurations so one network supporting qubes should especially use another DNS Server.

Is it possible to configure the DNS e.g. for 192.168.1.XXX

[tzwcfq]

How do I setup a custom DNS in AppVM?

Hello everyone, I’m trying to do this with standalone debian-10 AppVM + sys-firewall as NetVM. My goal is to be able to use any custom public DNS server when I’m using my AppVM, not servers provided by my NetVM. However, I’ve tried everything I could find and nothing is working. Simply changing /etc/resolv.conf, installing dnsmasq, changing NetworkManager config, installing PiHole… Everytime I ended up with DNS servers provided by sys-firewall. Any ideas how to solve this problem? Thank you.

[ceomi]

thanks for your reply but my problem is still not solved because the user runs unbound on the same os this because of 127.0.0.1 right?

and I want to use my pihole in my network but outside my qubes machine

I’ll try

[tzwcfq]

Add the following to /rw/config/qubes-ip-change-hook in your sys-firewall2:

#!/bin/sh
# This will Flush PR-QBS chain
iptables -t nat -F PR-QBS

# Redirects all the DNS traffic to 192.168.1.XXX:53
iptables -t nat -I PR-QBS -i vif+ -p tcp --dport 53 -j DNAT --to-destination 192.168.1.XXX
iptables -t nat -I PR-QBS -i vif+ -p udp --dport 53 -j DNAT --to-destination 192.168.1.XXX

[tripleh]

Usually editing /etc/resolv.conf in the template of your sys-net should do that.
Or use network-manager or systemd-resolved if they are managing that file. Just check what your template distro uses.
It’s not Qubes specific.

[ceomi]

do I have to activate qubes-firewall service

[tzwcfq]

qubes-firewall service is enabled for all NetVMs (the ones that have “Provides network” option enabled) by default.