Subcommander l0r3zz wrote:
> 
> 
> On 2/28/07, *Guido Tschakert* <[EMAIL PROTECTED]
> <mailto:[EMAIL PROTECTED]>> wrote:
> 
>     Jacob Yocom-Piatt wrote:
>     > i am forced to use windows at work and am trying to get a vmware
>     openbsd
>     > VM to recognize the non-virtual interfaces, so as to have openbsd
>     as the
>     > router for the windows system. this is using the free vmplayer v1.0.3.
>     >
>     > i've read and followed
>     >
>     > http://www.cs.drexel.edu/~vp/VirtualFirewall/
>     >
>     > and can only see the pcn0 interface under the VM (which is
>     3.8-release,
>     > btw) after following the suggestions contained therein. any clues
>     about
>     > getting the VM to recognize the real physical interfaces would be
>     great.
>     >
>     > cheers,
>     > jake
>     >
>     >
> 
>     Hello Jacob,
> 
>     some time ago there was an article in the german magazin ct' where they
>     described the same situation as you have (with the different that they
>     use ipcop (a linux firewall distro) instead of lovely openbsd to do the
>     job).
> 
>     You need the following in your vmware-config:
>     the real network card has to be used in bridged mode poimting to your
>     virtual pcn0 interface. This is the external interface of your firewall
>     pointing to the evil internet. Do not configure this card under windows
>     (Sorry at the moment I don't know if you can easily disable the card in
>     WIndows, but I may have a look in the article if you want)
> 
> 
> 
> This particular vmware product relies on the drivers of the host
> operating system to send packets to the outside world so if you disable
> the interface in windows, you also disable any virtuals nics that are
> bound to this interface.
> 
>  
> 
>     Next you need a virtual network beetween your virtual machine and your
>     host. Then you have a second nic in your Windows System (vmware virtual
>     something) and a second nic in your OpenbSD which points to your
>     internal (virtual) network.
> 
> 
> Fine, but ultimately you must go outside.  All vmware virtual mahines
> are "standardized" around this particular network interface, it is what
> enables us to do things like VMotion in the Enterprise products.  So,
> unlike Xen, vmware VMs  do not see the PCI buss or any other particulars
> of your underlying hardware.
> 
> 

Hi,
yes finally you must go outside, this is done with the bridged interface.
The question is (I don't have the complete answer, but a strange feeling):
How secure is your windows with a network interface enabled and nothing
on it configured.

guido

Reply via email to