KVM firewall

Hello,

I’ve got a KVM server running with three network interface cards, all three of them are bridged and used by the virtual machines.
Now I would like to restrict network access of one the NIC’s (and the virtual machines attached to it): only allow it to access the local network, so no internet access.

Is there an easy way to do this?

Thanks,
Jo

iptables?

I was afraid I would get that answer :-).
Time to pick it up again I guess.

Thanks,
Jo