The easiest way to set up a Sing-box proxy-vm to bypass the Chinese GFW on Qubes, without having to apply any firewall rules. 在 Qubes 上设置 Sing-box 代理虚拟机来绕过中国防火墙（GFW）最简单的方法，同时无需应用任何防火墙规则。
Here is the final solution that I work out.Turn out there are no firewall rules need to be apply.It simply work with the right configuration.