Am Wed, 14 Jan 2009 14:41:33 +0100 schrieb Frank Mehnert:

> On Wednesday 14 January 2009, Rich Morin wrote:
> 
> > At 13:50 +0100 1/14/09, Frank Mehnert wrote:
> > > Try NAT port forwarding ...
> >
> > I'm not sure I understand.  Section 6.4.1 of the User Manual talks
> > about forwarding selected ports TO the guest OS, but that isn't the
> > issue here.  What I want to do is make selected ports in the host
> > OS (and ONLY them) available to the guest OS.  Can I do this?  How?
> 
> Right, I misunderstood your scenario. No, that is currently not
> possible with VirtualBox.
> 

It might not be possible with VirtualBox alone, but with a Linux host
and iptables it certainly works. Just create a separate user for
VirtualBox and use iptables UID matching:

iptables -A OUTPUT -o lo -p tcp -m owner --uid-owner vbox -m tcp \
--dport 22 -j ACCEPT
iptables -A OUTPUT -m owner --uid-owner vbox -j DROP 

(obviously, replace protocol and ports according to what you want)

For some reason, doing the same with REJECT repeatedly crashed
VirtualBox, but DROP seems to work well.

Cheers,
Oliver

_______________________________________________
vbox-users mailing list
[email protected]
http://vbox.innotek.de/mailman/listinfo/vbox-users

Reply via email to