Restricting internet access from guest?

thegnark · Post by **thegnark** » 22. Jan 2009, 23:09

Hello,

I've installed VirtualBox with Host Networking, but would like to limit/restrict internet access from the guest (it should only access internal network devices). It needs to be accessible from other network devices (i.e. it exists as an application server), so NAT and Internal aren't feasible.

I thought of leaving the gateway setting empty, but some devices live on other subnets. Additionally, I have no control over network hardware to set an access restriction there.

Is there any other obvious solution that I try?

Post by **Sasquatch** » 23. Jan 2009, 00:51

There are some solutions. If you run Linux, you can create a TAP interface and use HIF with that. Then set forwarding on so your Host becomes a router for the Guest. Now set some IP table rules (see their website for more info) that only allows traffic from your Guest to the internal subnets. The rest is blocked with the source of your Guest. All other traffic is from your Host, so that needs to be allowed.

If you have Windows, then a firewall with similar functionality as Linux iptables is needed. See the VirtualBox FAQ for how to install the MS Loopback adapter.