0

I have a VM box configured using NAT to my host OS. It seems I can ping to the machines in my LAN. If my VM box got infected somehow my malware while surfing, would the malware be able to infect machines in my LAN? thanks.

  • ANY computer that has network access to your network can launch attacks. – schroeder Mar 3 '15 at 1:18
  • Thanks. the other way is to use "Host Only" mode, right? – dorothy Mar 3 '15 at 1:37
  • 1
    It could infect the Host machine, and the Host would be able to infect the other machines. But this scenario is very unlikely. – ThoriumBR Mar 3 '15 at 2:11
  • @ThoriumBR if the VM can ping the LAN, why does it have to propagate through infection of the host? Granted, it will likely be on another subnet, but network access is network access. – schroeder Mar 3 '15 at 4:46
  • @schroeder The infection of the host is needed in the case of a Host only network. – ThoriumBR Mar 3 '15 at 15:47
2

VM box --(virtualnetwork)--> Linux VM with iptables (NAT and restrict only port 80/443, etc) --(nat/bridge)--> Host PC

This will ensure infections in your VM box cannot spread laterally.

And also make sure your user accounts in the VM box are not the same as the ones on your network.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.