直接上代码，首先添加防火墙规则，vmid是1001到1191的VM，这里禁用mail功能

for i in {1..191};

do

	echo '[OPTIONS]

enable: 1
policy_in: ACCEPT
[RULES]
OUT Mail(REJECT) -log nolog’ > /etc/pve/firewall/$((i+1000)).fw;
done

启用防火墙（网卡net0）

for i in {1..191};

do

vm_id=$((i+1000))

temp=$(qm config ${vm_id} --current | grep ^net0 | cut -d " " -f 2);

if [ $(echo $temp | grep firewall)  ]; then

   qm set ${vm_id} --net0 $(echo $temp |sed "s/firewall=[^,]*/firewall=1/")

else

    qm set ${vm_id} --net0 $(echo ${temp}",firewall=1")

fi

done