Den sön 26 maj 2019 kl 10:03 skrev Walt <neurobot...@protonmail.ch>:
> I like having a firewall that would pretty much require someone physically > entering the computer room in order to attack the firewall. With OpenBSD, > your firewall can control your network traffic without having an IP address > at all. > One thing that you could try is to use the OpenBSD VM as the firewall, but > don't assign any IP address to the firewall. The Win7 VM would have the > actual IP address, but the OpenBSD VM would control the network. > I am curious if there is any way to attack the firewall if it has no IP > addresses. > If you build it like the emails before listed, you still have the attack surface of the whole OS that runs VirtualBox, then the whole codebase of Virtualbox on top of that before you reach your obsd ip-less un-maintainable VM to "protect you" from evil packets. -- May the most significant bit of your life be positive.
