Qubes OS Firewall limitation

[xyz_cube]

Hi guys,
I’m dealing with the firewall limitations in Qubes OS. I’ve noticed that when I add a domain to restrict outgoing traffic, it sometimes works and sometimes doesn’t. I think this is because DNS resolution only happens when the VM starts, so if the IPs change afterward, it stops working properly — is that correct?
How do you handle this? For example, if I have a VM dedicated to accessing a specific website, I’d like to make sure it can only access that site.
Thanks!

[fsflover]

Did you have a look at this?

[solene]

I’ve just wrote this, you might be interested

URL filtering HTTPS proxy

Introduction This guide is meant to users who want to allow a qube to reach some websites but not the all Internet, but facing the issue that using the firewall does not work well if DNS names on which the associated IPs often change. This guide is for advanced users who understand what a HTTP(s) proxy is, and how to type commands or edit files in a terminal. The setup will create a “sys-proxy-out” qube that will define a list of allowed domains, and use qvm-connect-tcp to allow clie…

[xyz_cube]

Thank you, im going to look it.

[xyz_cube]

Yes i saw it, but don’t like it very much