Re: [Shorewall-users] virtual serveres

2012-01-18 Thread Måns Åman
firewall but sometimes you don't have that opportunity. /Måns -Original Message- From: Simon Hobson [mailto:li...@thehobsons.co.uk] Sent: den 18 januari 2012 08:52 To: Shorewall Users Subject: Re: [Shorewall-users] virtual serveres Christ Schlacta wrote: You may end up with simply

Re: [Shorewall-users] virtual serveres

2012-01-18 Thread Robert K Coffman Jr. -Info From Data Corp.
Is it possible/advisable to configure shorewall on the host to act as a firewall for the virtual machines, each having one or more static public IP address? May not apply to VBox but what I did on ESXi is create a private vlan with my hosting servers and a public vlan that faces the

Re: [Shorewall-users] virtual serveres

2012-01-17 Thread Christ Schlacta
It's not a bad idea if it works with your virtualization technology. There are several guides in the documentation section of the Shorewall site dealing with various networking technologies. You should identify the one that's closest to how your virtualization technology works (with regard

Re: [Shorewall-users] virtual serveres

2012-01-17 Thread Simon Hobson
Christ Schlacta wrote: You may end up with simply a bridge firewall. I recently did the same thing, and am of a mind that for my purposes, an individual firewall on each vm is preferable. That's the solution I came up with as well. On my hosts I run a very basic set of iptables rules on the