I want the host the v.m. is running on is isolated from v.m. as far as possible.
As mentioned all this for purposes of sandboxing. If in the guest's network traffic under
malicious/fraudulent soft's control, it should be prevented from propagating from guest to host.