In addition to
sys-net
sys-usb
sys-firewall
sys-vpn
sys-tor
I also have
sys-pi-hole
sys-davmail
As Zrubi said “sys-” is just a prefix, but I think we all get it: it’s a
service VM that provides some kind of service to other qubes.
davmail is a java based proxy service that can talk to an Outlook web
instance (Office 365 or your companies instance) and offers standard
SMTP, POP, IMAP, LDAP, CALDAV etc. I like to isolate it in an dedicated
sys- qube.
pi-hole is basically a local DNS resolver with a very fancy dashboard
and extensive black/whitelisting. It’s nice to see where your qubes want
to connect to and to be able to extensive block telemetry stuff of e.g.
a windows qube. It also makes loading some website faster.
I block around 46% of all DNS queries without any impact on
functionality. It’s quite enlightening to see how extensive this
tracking and telemetry stuff is.
But this is getting slightly off-topic for this forum. Feel free to
message me or start a new thread in “All about Qubes” if you’d like.