But definitively, KVM is quite a bit a lot more handy for every thing than an OpenVZ pr any container system for a VPS. netfilter iptables (shortly to be replaced by nftables) is really a user-House command line utility to configure kernel packet filtering procedures formulated by netfilter. R