I have a VM box configured using NAT to my host OS. It seems I can ping to the machines in my LAN. If my VM box got infected somehow my malware while surfing, would the malware be able to infect machines in my LAN? thanks.

  • ANY computer that has network access to your network can launch attacks.
    – schroeder
    Mar 3, 2015 at 1:18
  • Thanks. the other way is to use "Host Only" mode, right?
    – dorothy
    Mar 3, 2015 at 1:37
  • 1
    It could infect the Host machine, and the Host would be able to infect the other machines. But this scenario is very unlikely.
    – ThoriumBR
    Mar 3, 2015 at 2:11
  • @ThoriumBR if the VM can ping the LAN, why does it have to propagate through infection of the host? Granted, it will likely be on another subnet, but network access is network access.
    – schroeder
    Mar 3, 2015 at 4:46
  • @schroeder The infection of the host is needed in the case of a Host only network.
    – ThoriumBR
    Mar 3, 2015 at 15:47

1 Answer 1


VM box --(virtualnetwork)--> Linux VM with iptables (NAT and restrict only port 80/443, etc) --(nat/bridge)--> Host PC

This will ensure infections in your VM box cannot spread laterally.

And also make sure your user accounts in the VM box are not the same as the ones on your network.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .