But definitively, KVM is a great deal additional practical for every little thing than an OpenVZ pr any container procedure for any VPS.netfilter iptables (shortly to get replaced by nftables) can be a consumer-Area command line utility to configure kernel packet filtering rules made by netfilter.According to what sort of packets you need to block