Hardening the network on the host

[Patrick]

Self Support First Policy for Whonix applies.

See also:

GitHub - rustybird/corridor: Tor traffic whitelisting gateway

https://phabricator.whonix.org/T942

Whonix-Host KVM Firewall

How easy is it to adapt corridor and allow non torrified VMs like Kicksecure to connect too? Think dealing with captive portals. Per vm network granularity may be bluntly possible by excluding the kvm user group from networking restrictions o ensure no other non tor traffic form the host may happen. This should allow updates via apt-tor to work too.