Is the whonix-dvm → sys-mirage-fw → sys-whonix adviseable? I think I read some days ago something about stream isolation or so about another topic that its not adviseable (couldnt find it anymore), but the circumstances where not the same.
The thread was “Easy Qubes firewall for VMs connected to sys-whonix” -
I’m surprised that you couldnt find this.
There’s nothing wrong with that configuration. The issue arises if you
have multiple qubes connected to sys-mirage-fw. That’s when there is a
problem with stream isolation, because all the streams from those
diverse qubes appear to sys-whonix as coming from the same IP address.
I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.