Alex,
yes, you can (U have done so in real time here). Also, you can isolate 
that firewall bridge from every other VM on the
host without much difficulty (thus preventing one of the scenarios that 
would develop should you misconfigure the
internal bridge).

also, to put this in some perspective, me and a friend were doing this 
level of Virtual Machine work long before
any of the white papers were ever written. He's the one that clued me in 
to how this was done and we both ended up
doing a live running test under vmware server for Linux at the time.


Alex Dean wrote:
>
> On Apr 27, 2009, at 1:24 PM, Eric Shubert wrote:
>
>> Mark,
>>
>> I have a couple old e-machines that I made into IPCop firewall/routers,
>> and have been decommissioned for a while (they were virtualized).
>
> Do you mean you virtualized your firewall?  Doesn't that create a risk 
> that other VMs on the same hardware host might be exposed to nasty 
> stuff which arrives at the firewall?  I'm recalling Austin's talk on 
> VMs & security from a year or two ago.
>
> If I've misunderstood your statement, please disregard.
>
> alex

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss