DMZ Question
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello People,
I'm not sure if the subject for this mail is correct or not.
I have a laptop which is connected to the internet using eth0.
I run a VM of Debian Stable with UML which gets connected to tap0.
Presently I'm masquerading to allow the VM to connect to the internet.
`iptables -t nat -A POSTROUTING -s VM-IP -o eth0 -j MASQUERADE`;
echo "1" > /proc/sys/net/ipv4/ip_forward
I want to keep my VM completely naked to the internet while still keeping my
laptop secure.
Do these iptable rules suffice ?
==
iptables -t nat -A POSTROUTING -s VM-IP -o eth0 -j MASQUERADE
echo "1" > /proc/sys/net/ipv4/ip_forward
iptables -A INPUT -i eth0 -d VM-IP -j ACCEPT;
iptables -A INPUT -i eth0 -m state --state NEW,INVALID -j DROP
==
Thanks,
Ritesh
- --
Ritesh Raj Sarraf
RESEARCHUT -- http://www.researchut.com
"Necessity is the mother of invention."
"Stealing logic from one person is plagiarism, stealing from many is
research."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
iD8DBQFENsZM4Rhi6gTxMLwRAroKAJ9kG9VSjEBVMJj4SBH5S7OYJGLVowCfRbS9
765+4tCMeWBZ6IUzO+T3xTw=
=fcqd
-----END PGP SIGNATURE-----
Reply to: