How to set firewall rules for disp vms?

[galth...@gmail.com]

I need some help setting firewall rules for disp vms.

In my house I have:

router  192.168.0.1

printer 192.168.0.123

and everything else is 192.168.0.X

For most of my app vms I want them to see the internet, printer and router but not any other device  so I apply these rules:

qvm-firewall email add action=accept 192.168.0.123/32
qvm-firewall email add action=accept 192.168.0.1/32
qvm-firewall email add action=drop 192.168.0.0/24
qvm-firewall email add action=accept 0.0.0.0/0

This works fine but when I open a document in a disp vm, the disp vm has access to everything. How can I apply the rules above to disp VMs?