My goal is to establish a perimeter around a VirtualBox hosted VM. Total network control. I want to monitor, log, filter, prioritize, block, drop, or otherwise inspect or manipulate every outgoing and incoming network packet, establishing rules by IP address, domain name, port. Packets are processed according to rules. Unless there is a rule to drop or pass the packet, the default rule is to hold packets in a queue for the operator to establish a rule, ideally using a GUI tool that pops up when a new packet awaits "moderation" and facilitating the creation of the rules.
I would prefer the firewall appliance to run in the host system, but it can also run in another VM if necessary.
My host system is Kubuntu. I will consider any other Linux or BSD host. I see no reason to consider Windows or OSX host, but am open to be persuaded otherwise.
I would prefer the firewall to be Free / Open Source, but I will consider proprietary solutions if they have comparative advantages.
What are the best tools to accomplish this? Any sample configuration out there?