Additional chain for some qubes-related redirections. BTW PR-QBS should be renamed now to PR-QBS-DNS...
Masquerading packets on lo actually drops them when there is no default route. This causes problems with commutication between ntpd processes (ntp main daemon and resolver). And perhaps many more...