I've managed to install pfSense as a HVM. not sure if it makes sense to run it as a trusted firewall but that is possible. I created 2 netvms called LAN and DMZ and created bridges in those. i made a copy of pfSense HVM config and changed interface type to bridge, added a second virtual interface and linked them to bridges in LAN and DMZ backends. a pci network interface was also delegated to that domain (thought it would become the WAN) but pfSense didn't recognize it. I created an alternative config for a Manjaro HVM to connect to the bridge in LAN and after manually setting addresses on all network interfaces and bridges and a bit of tinkering with iptables I could login to pfSense admin portal from Manjaro I think putting it together with standard appvms and proxyvms in one network topology is possible but I haven't tried yet.
for reference re multiple network interfaces connecting to bridges http://libvirt.org/formatdomain.html#elementsNICSVirtual -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b0283ea0-6d6b-43ee-97de-f4d528357218%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
