On virsh... Whonix-External, Failed to apply firewall rules

Blocks based on user debian-tor. That won’t work in case of using VMs. How to run Tor in a VM and then allow only that VM (or only Tor traffic) (really Tor, not user debian-tor) on the host is yet to be invented as per:
Whonix-Host KVM Firewall