Adding qvm-firewall rule to all VMs

How can I add firewall rule as default? I want to prevent all my VM’s (with exception for work VM) from accessing my router etc. How I can do that?

You can use qvm-firewall in dom0 to change the rules for sys-firewall, you could set the default rule to deny and make an exception for work.

edit: guess that doesn’t work, you can’t make exceptions.