Qubes OS websites (CNAME & A for firewall config.)

General Discussion
1

Hi all,

For people managing strict firewalling on dedicated qubes for visiting some webs (yes, I do use a dedicated qube to visit Qubes OS related sites), here are some tips:

  1. dig is our best friend.

2.1 Qubes OS documentation uses readthedocs.io,
doc.qubes-os.org. 44 IN CNAME readthedocs.io.
readthedocs.io. 66 IN A 104.16.254.120
readthedocs.io. 66 IN A 104.16.253.120

2.2 Qubes OS website uses github,
www.qubes-os.org. 227 IN CNAME qubesos.github.io.
qubesos.github.io. 3527 IN A 185.199.110.153
qubesos.github.io. 3527 IN A 185.199.108.153
qubesos.github.io. 3527 IN A 185.199.111.153
qubesos.github.io. 3527 IN A 185.199.109.153

2.3 Qubes OS forums is a discourse hosted discourse server
forum.qubes-os.org. 300 IN CNAME qubesos.discoursehosting.net.
qubesos.discoursehosting.net. 300 IN A 94.130.75.125

Cheers,

2

It would be nice if qubesos hosted any IP only redirects (even if it was IPv6) so we can visit their sites and download updates without the dangers of DNS

1 Like