I'm running some guests on a KVM dedicated server, and I would like to use the host as a firewall, to control all accesses down from the hypervisor, using forwarding rules.
It is a good idea or is better to run iptables on every guest machine? Do you know any similar case of use, or any guide?