First one I have in Whonix Anon Connection Wizard every time I start Tor connection.
You configured a non-loopback address '10.137.0.12:9203' for HTTP TunnelPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted
Ok, here is the thread with the same question but there is different address and port and there is SocksPort. In my log I have http TunnelPort. So I still ask for any case.
The second one I have every time in Whonix Update log. It looks like it shows some torified update sources but there is one address that doesn’t have tor+. Does it mean that this one address have clearnet connection during update process, by-passing Tor? I configured sys-whonix as update proxy for everything. Disabled all clearnet update checks and disabled networking for all non-whonix qubes, so expected not to have clearnet traffic leaks. Here is that log, taken from Qubes Update app:
:1 tor+https://deb.debian.org/debian bookworm InRelease
:2 https://deb.qubes-os.org/r4.2/vm bookworm InRelease
:3 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack InRelease
:4 tor+https://deb.debian.org/debian bookworm-updates InRelease
:5 tor+https://deb.whonix.org bookworm InRelease
:6 tor+https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging InRelease
:7 tor+https://deb.kicksecure.com bookworm InRelease
:8 tor+https://deb.debian.org/debian-security bookworm-security InRelease
:9 tor+https://deb.debian.org/debian bookworm-backports InRelease