I have a virtual server running Debian. It's host OS is using Linux Vserver and due to its lack of support for network namespaces, using iptables to secure the box is not an option. I did many searches looking for alternatives but so far I'm only finding different front ends to manage iptables itself.
Is there anything else out there? I was hoping to tie it in into my OSSEC active response scripts to enable real time blocking when malicious activity is detected.