Qvm-firewall command, DNS leaks

User Support
1

I’m using this guide Wireguard VPN setup to set up protonVPN on the latest Qubes version(i have done this countless times).
When i get to this part of the guide:
qvm-firewall sys-vpn reset # (1)
qvm-firewall sys-vpn add accept dsthost=1.2.3.4 # (2)
qvm-firewall sys-vpn del --rule-no 0 # (3)

The qvm-firewall command doesn’t work.
bash: qvm-firewall: command not found

I don’t know how to fix the DNS leak without the QVM command… Can someone please help me, every time I reinstall Qubes there is some BS like this and it is so frustrating. Is there somewhere i can go to check if the commands have been changed? I believe this happened with ‘qvm-create’ a few months back also, but then they switched it back.

2

Hi, you need to run this in dom0

3

Thanks!

4

This didn’t work, I’m going to retry.

5

I think I found something that might need changing in your guide, but i’m not sure, here’s what i did different:

After this step: " Enable service “network-manager” in sys-vpn", and before the step: “Get your wireguard VPN configuration file”, I think there should also be this step: "Enable service “qubes-firewall” in sys-vpn.

In the later part of the guide it says to make sure qubes-firewall is activated, but doesn’t seem to mention it before that. Sorry if I am being dumb and just missed something, but that is what i did different(unless i missed something) and it works now.

1 Like