But definitively, KVM is a lot additional hassle-free for every little thing than an OpenVZ pr any container method for just a VPS.netfilter iptables (shortly to get replaced by nftables) can be a consumer-space command line utility to configure kernel packet filtering policies made by netfilter.Can bring about block script if specified IP masses n