Restricting IPs in a VM