But definitively, KVM is a whole lot more easy for every little thing than an OpenVZ pr any container system for your VPS.netfilter iptables (quickly to be replaced by nftables) is actually a consumer-Room command line utility to configure kernel packet filtering principles designed by netfilter.The above iptables rule blocks new packets (only SYN