I'm also doing this with internet-connected vms, but I have closed all ports using Iptables