Port restriction on VM's in KVM (Virtualizor)

danitfk

Hello geeks !
I'm looking for a solution about block some ports like (25,110,993,21) on my VM's in KVM.
In fact I want users do not able to sending email , I'm using virtualizor control panel.
And I must notice , We're hosting in Hetzner.

Any one have a suggest about this?

wych

IpTables on the host node?

danitfk

@wych said:
IpTables on the host node?

Yes , Iptables exist on KVM.
Could you say exact command for restriction ?
Is that something like this?
iptables -I FORWARD 1 -d $ip -p tcp -m tcp --dport 1242 -j DROP

Thanks for your replay

Kihi

@danitfk said:
Thanks for your replay

You can block via IP, or better yet (if your host in in bridge mode), setup interface names per VM and block via interface.

danitfk

@Kihi said: You can block via IP, or better yet (if your host in in bridge mode), setup interface names per VM and block via interface.

Per IP is better solution for me , because I want block ports just for some IP's (or VM's).
Is it good for block 1242 ports?

'-I FORWARD 1 -d $ip -p tcp -m tcp --dport 1242 -j DROP'