I am going to set up a KVM virtualization server on CentOS. The host machine and several of the VMs will have a dedicated IP addresses.
I'm going to need to close off unused ports and probably provide port forwarding for some of the VMs.
I know I should configure bridged networking and then look into iptables. So far my default plan is to close off unused ports on host machine with iptables, and each VM will manage itself with iptables as well. When I'll need to set up port forwarding for VM's that don't have a dedicated IP, I'll have to expand the host machines' iptables rules.
Is this reasonable? Is there anything else I should know?