I did the same and you just should keep in mind that the sys-firewall would block any communication between VM's or between Clients and Qubes VM´s.
Someone posted this Link: https://www.qubes-os.org/doc/firewall/#enabling-networking-between-two-qubes it helped a lot. Just make sure that you either update iptable rules for each of your Service VM´s (for example Web-server-VM) or connect the Service VM's directly to sys-net without sys-firewall but this is, I think, not recommended. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0e2df1ac-8416-4e9c-bc09-41455391a23c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.