Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I've been wondering about this.

Assume a host with a strong firewall setup (for example only allowing port 80). That host has some virtual machines without firewall.

Why the connections made on these virtual machines aren't rejected by the firewall in the host? At the end, the VM it's only a program running in the host like any other program.

share|improve this question

1 Answer 1

up vote 9 down vote accepted

If you're running a VM and it isn't filtered by the firewall, then it's probably operating in a bridged mode at L2 below the firewall's view of packets. To diagram:

network card  --|-- firewall ---- applications
                |
               VM

If you're talking about Linux, then a Serverfault question discusses this as well, and there are kernel patches to change this behavior with iptables. There's also ebtables, which is designed specifically for bridged interface filtering.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.