I know that I can use any firewall. But at the same time I'm able to unblock the ports, when I want.
I want to ban an access to VMs for administrator of Proxmox. The only thing he should do is to create/stop VM, but he must not have access to VM's data, using VNC