'''Modify {{project_name_workstation_long}} User Firewall Settings'''

{{Box|text=
'''Note''': If no changes have yet been made to Whonix Firewall Settings, then the Whonix User Firewall Settings File <code>/etc/kicksecure_firewall.d/50_user.conf</code> appears empty (because it does not exist). This is expected.

<u>If using [[Qubes|{{qubes_project_name}}]]</u>, complete these steps.<br />
In {{project_name_workstation_short}} AppVM. Make sure folder <code>/usr/local/etc/kicksecure_firewall.d</code> exists.

{{CodeSelect|code=
sudo mkdir -p /usr/local/etc/kicksecure_firewall.d
}}

<code>Qubes App Launcher (blue/grey "Q")</code> &rarr; <code>{{project_name_workstation_short}} AppVM (commonly called {{Code2|{{project_name_workstation_vm}}}})</code> &rarr; <code>Whonix User Firewall Settings</code>

<u>If using a graphical {{project_name_workstation_short}}</u>, complete these steps.

<code>Start Menu</code> &rarr; <code>Applications</code> &rarr; <code>System</code> &rarr; <code>User Firewall Settings</code>

<u>If using a terminal-only {{project_name_workstation_short}}</u>, complete these steps.

Open <code>/usr/local/etc/kicksecure_firewall.d/50_user.conf</code> with root rights.

{{CodeSelect|code=
sudoedit /usr/local/etc/kicksecure_firewall.d/50_user.conf
}}

<div class="toccolours mw-collapsible mw-collapsed">
For more help, press on Expand on the right.
<div class="mw-collapsible-content">
{{Box|text=
'''Note: This is for informational purposes only!''' Do not edit <code>/etc/kicksecure_firewall.d/30_whonix_workstation_default.conf</code>.

The Whonix Global Firewall Settings File <code>/etc/kicksecure_firewall.d/30_whonix_workstation_default.conf</code> contains default settings and explanatory comments about their purpose. By default, the file is opened read-only and is not meant to be directly edited. Below, it is recommended to open the file without root rights. The file contains an explanatory comment on how to change firewall settings.

<pre>
## Please use "/etc/kicksecure_firewall.d/50_user.conf" for your custom configuration,
## which will override the defaults found here. When Whonix is updated, this
## file may be overwritten.
</pre>

See also [[Configuration Files|Whonix modular flexible .d style configuration folders]].

To view the file, follow these instructions.

{{Box|text=
<u>If using [[Qubes|{{qubes_project_name}}]]</u>, complete these steps.

<code>Qubes App Launcher (blue/grey "Q")</code> &rarr; <code>Template:</code> <code>{{project_name_workstation_template}}</code> &rarr; <code>Whonix Global Firewall Settings</code>

<u>If using a graphical {{project_name_workstation_short}}</u>, complete these steps.

<code>Start Menu</code> &rarr; <code>Applications</code> &rarr; <code>Settings</code> &rarr; <code>Global Firewall Settings</code>

<u>If using a terminal-only {{project_name_workstation_short}}</u>, complete these steps.

In {{project_name_workstation_short}}, open the kicksecure_firewall configuration file in an editor.
{{CodeSelect|code=
nano /etc/kicksecure_firewall.d/30_whonix_workstation_default.conf
}}
}}
}}
</div>
</div>
}}