What I forgot to mention is, that I did found the config for "IP filter" but with enabling this, and configuring a IPSet "ipfilter-net0" to a specific IP form the subnet, does prevent outgooing connctions when the IP is changed on VM. The problem is, that incoming connections still work fine...