Template:Firewall Settings Workstation

Modify Whonix User Firewall Settings.

Note: Initially, if you have not made any changes to Whonix Firewall Settings, then Whonix User Firewall Settings File /etc/whonix_firewall.d/50_user.conf appears empty, because it does not exist. This is expected.

If you are using Qubes-Whonix, complete the following steps: In Whonix-Workstation AppVM.

Click = Copy Copied to clipboard! sudo mkdir -p /rw/config/whonix_firewall.d

Open file /rw/config/whonix_firewall.d in an editor with root rights.

Select your platform.

• Kicksecure
• Kicksecure-Qubes
• Others and Alternatives

Kicksecure

See Open File with Root Rights for detailed instructions on why using sudoedit improves security and how to use it.

Note: Mousepad (or the chosen text editor) must be closed before running the sudoedit command.

Click = Copy Copied to clipboard! sudoedit /rw/config/whonix_firewall.d

Kicksecure-Qubes

Notes:

• When using Kicksecure-Qubes, this must be done inside the Template.

Click = Copy Copied to clipboard! sudoedit /rw/config/whonix_firewall.d

• After applying this change, shut down the Template.
• All App Qubes based on the Template need to be restarted if they were already running.
• This is a general procedure required for Qubes and is unspecific to Kicksecure-Qubes.

Others and Alternatives

Notes:

• This is just an example. Other tools could achieve the same goal.
• If this example does not work for you, or if you are not using Kicksecure, please refer to Open File with Root Rights.

Click = Copy Copied to clipboard! sudoedit /rw/config/whonix_firewall.d

If you are using a graphical Whonix-Workstation, complete the following steps:

Start Menu -> Applications -> Settings -> User Firewall Settings

If you are using a terminal-only Whonix-Workstation, complete the following steps: Click = Copy Copied to clipboard! sudo nano /etc/whonix_firewall.d/50_user.conf

Learn More

For more help, press on expand on the right.

Note: Whonix Global Firewall Settings File /etc/whonix_firewall.d/30_default.conf contains default settings and explanatory comments what these settings purpose. It gets opened read-only by default. By default you are not supposed to directly edit the file. Below, we recommend to open the file without root rights. The file contains an explanatory comment on how to change firewall settings.

## Please use "/etc/whonix_firewall.d/50_user.conf" for your custom configuration,
## which will override the defaults found here. When Whonix is updated, this
## file may be overwritten.

See also Whonix modular flexible .d style configuration folders.

To view the file, complete the following steps.

If you are using Qubes-Whonix, complete the following steps:

Qubes App Launcher (blue/grey "Q") -> Template: whonix-gw -> Whonix Global Firewall Settings

If you are using a graphical Whonix-Gateway, complete the following steps:

Start Menu -> Applications -> Settings -> Global Firewall Settings

If you are using a terminal-only Whonix-Gateway, complete the following steps: nano /etc/whonix_firewall.d/30_default.conf