Hi again and thanks for answers to Unman and Ivan.
My last question is about qubes.UpdatesProxy policy.
Now the dom0 is being updated through sys-whonix-14 but all vm templates are being updated over sys-net.
Is it possible to update everything over TOR (sys-whonix-14) ?
How best to do this - change the repositories into VM templates to TOR repo or change rule for all templates on qubes.UpdatesProxy policy?
(for example, $type:TemplateVM $default allow,target=sys-whonix-14)
Thanks.