Just thought I'd leave this here. Maybe it works for you, maybe it does not.
1. Shutdown whatever VMs are needed, and the sys-firewall 2. Open terminal in dom0, qvm-clone the sys-firewall 3. Set it to deny all traffic except to the IP that you want to https://xpra.org/ into your win7 HVM from. VNC is insecure by design which is why Subgraph OS doesn't use it; correct me if I am talking shit 4. Remove the sys-net from your cloned sys-firewall Profit. You now have a win7 instance with an internal IP that can communicate with other VMs, but no access to the inet. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6c69b7d1-343a-499c-a341-14553f5dd0ab%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
