We are a VPS hosting company that have servers housed in a datacenter in Germany. Currently we are receiving multiple take-down requests because customers are ports scanning or attacking servers outside our network and we are looking for a way to prevent this, our old DC just blocked the IPs automatically on their end so we could take action but the new DC doesn't do this.
We took a look at the following options:
- Nodewatch, unfortunately that only works with OpenVZ and we use KVM.
- UTM Firewalls might do the job but I can't find what we are looking for in the manuals (and I'm not sure what it's called)
- A Linux firewall distribution, same thing as a hardware firewall. Can't find the right naming.
What is the right way to prevent outgoing attacks since most firewalls only offer protection for incoming attacks?