Re: networking with virtual machine
On Tuesday, September 18, 2012 05:59:47 PM lee wrote:
> Neal Murphy <neal.p.murphy@alum.wpi.edu> writes:
> > So yes, if you want 'real' networking, you'll need bridges and taps.
>
> Thank you, I'll have to look into taps then.
>
> Do you think it's a good idea to just create a bridge device with the
> unused eth0 for this? I could leave eth1 as is and would basically only
> have to add a zone and appropriate policy and rules in the shorewall
> configuration.
If that is the only firewall method you have then yes, enable forwarding, add
the bridge to a second shorewall zone, and add iptables rules that drop,
reject, allow and deny traffic as you desire. All of your VMs can easily be
tapped into the bridge.
Reply to: