Monroe coin bounty: how to make other VMs disconnect when the vpn software inside the VM disconnects?

I also want to block ICMP but

qvm-firewall sys-net del proto=icmp accept

(or sys-firewall)

returns with

x not in list

reset Disable ping

also does nothing.

This seems to work.

What else to block and stop probing?