How can I create a VM in virt-manager that can access the internet through the host but can't even see the host or other devices on the LAN?

I want to be able to create multiple VMs for testing purposes -- questionable websites, files that could be infected with a virus, etc. I want to make sure these VMs should be able to access the internet (through the host) but they should not be able to access the host or any other device on th

Re: How can I create a VM in virt-manager that can access the internet through the host but can't even see the host or other devices on the LAN?

> I want to make sure these VMs should be able to access the internet > (through the host) but they should not be able to access the host or any > other device on the LAN. The first and simplest solution comes into my mind is to use the direct type interface (aka. macvtap). Note: "eth0