But definitively, KVM is a good deal far more practical for all the things than an OpenVZ pr any container technique for just a VPS.netfilter iptables (before long to be replaced by nftables) is often a person-space command line utility to configure kernel packet filtering policies designed by netfilter.The above mentioned iptables rule blocks new