Sure you can. Set your VM up for host-only networking and you can use iptables to do whatever you want to the packets.