The hosts OS might be Windows 7 and its firewall activated and the visualization is done by Virtual Box , but I think these details are less important.

This question might be related in some way to this which focuses on bridged mode, but my focus here is on using NAT.


Can malicious sites one visits from inside the VM, identify the host, scan its ports etc.

  • What exactly is your question? I have no idea what word(s) attrac and attacts are exactly. – Ramhound Dec 27 '11 at 20:44

The short answer is "yes". If a guest is infected, it could certainly attempt a vulnerability scan of other devices on your network, including the host OS. This is assuming you haven't done something like placing the guest OS's network adaptor into a different VLAN or something similar. I doubt you have. Another way to avoid this would be to leave the host OS with an IP stack that isn't configured, thus mmaking it unable to communicate with the rest of the network. This also assumes it doesn't grab an address via DHCP. This is certainly an option if you don't plan to use the host OS for anything other than running guest VMs. But if you use the host OS for anything network related, then this may not be an option.

| improve this answer | |
  • Putting something in a VLAN? I think you mean isolated network. A VLAN can be layer 3 and route to another network. Which would not protect much. – Bernie White Feb 9 '12 at 6:31
  • A VLAN without an IP address assigned to the VLAN interface is an isolated network. A VLAN is a Layer 2 feature. – Jason Huebel Feb 10 '12 at 3:25
  • My point being, having a "VLAN" does not implicitly mean a network is isolated as it is very common to route between VLANs. You should clarify this in your answer. – Bernie White Feb 10 '12 at 4:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.