Blocking traffic inside sys-net

I shared how to proceed a few messages above, see Route ALL Qubes traffic through VPN - #7 by DVM

qvm-service <qube> qubes-update-check off