Restrict internet access for a VM ruing on Linux with firewall rules

I have Red Hat 7 ruing on my workstation, and Windows 10, used for working with Windows programs, in a virtual machine ruing on KVM/QEMU. The workstation, fulfilling the role as hypervisor, and the guest (Windows 10), are only allowed to visit websites on the world wide web. I've used the following rules to open specific ports for this purpose:

# firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p udp --dport=53 -j ACCEPT 
# firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p tcp --dport=53 -j ACCEPT
# firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p tcp --dport=80 -j ACCEPT
# firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -p tcp --dport=443 -j ACCEPT
# firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -j DROP

After executing the runtime rules, visiting websites on the workstation works as opposed to visiting websites on the VM. Executing nslookup on the windows command prompt gives a 'time out'. Probably, I have to add rules of modify existing ones in Red Hat to allow the VM/Windows to make coections to the outside world. A virtual network interface (type NAT) is configured for the VM. Does somebody has a solution?

- - , .
.