[Podman] firewalling pods - how?

Hi guys. I'm thinking of rootfull + macvlan pods and I wonder how to firewall those. Is there a preferred way or perhaps best practice for such a setup would anybody recommend? many thanks, L.