Block all outgoing destinations not internal for a VM

[Petric Frank]

Hello,

how to block all traffic which have not a destination IP-Address 
pointing to the internal network ?

Example:
   Internal network: 192.168.2.0/24
   Allow: all destinations in 192.168.2.0/24
   Block: any destination not in 192.168.2.0/24

How the firewall of a VM have to be configured ?

Thanks for your assistance.

kind regards
   Petric