I have a program that needs connection to the internet. I don't trust the program so I have made a sandbox for it, usíng VirtualBOX. Both Host OS and Guest OS is XP Pro. Comodo Firewall is used on the Guest OS to filter all but one port in/out. Host OS is un-firewalled. The PC resides on my LAN behind a NAT-router.
What network configuration will support one port to be directed through my NAT-router (port will be forwarded from NAT-router to what IP-interface on the Host?) without interferering with my LAN (Linux-machines, Host OS, printer etc.)?
Thanks in advance
Jesper
Which networking option?
-
mpack
- Site Moderator
- Posts: 39134
- Joined: 4. Sep 2008, 17:09
- Primary OS: MS Windows 10
- VBox Version: VirtualBox+Oracle ExtPack
- Guest OSses: Mostly XP
Re: Which networking option?
If all your guest needs is an internet connection then NAT mode for the guest should work.
-
MarkCranness
- Volunteer
- Posts: 875
- Joined: 10. Oct 2009, 06:27
- Primary OS: MS Windows 7
- VBox Version: VirtualBox+Oracle ExtPack
- Guest OSses: Windows Server 2008 R2; Ubuntu 11.04; Windows 2000 Server; Windows XP
Re: Which networking option?
Comments in this post apply to your situation: Using Virtualbox guest OS as test OS for Malware removal
Using either NAT networking or Bridged networking on the VM will allow you to port forward to it.
If using Bridged networking, the VM has its own IP on your lan (assigned by DHCP on your lan or set statically). Set your router to port forward to that IP.
If using NAT netorking, your host is also a router for the VM and you need to also port forward from your host to the VM. See section 6.4.1 of the user manual. Set your router to port forward to the host's IP.
How much don't you trust that program? If that program was malicious and able to break through or disable Comodo Firewall, then it can TCP/IP connect to your host and attempt exploits.
In that case you should use Bridged networking and put a firewall on your host (and on other computers/devices on your lan) - see the link above for an explanation.
Using either NAT networking or Bridged networking on the VM will allow you to port forward to it.
If using Bridged networking, the VM has its own IP on your lan (assigned by DHCP on your lan or set statically). Set your router to port forward to that IP.
If using NAT netorking, your host is also a router for the VM and you need to also port forward from your host to the VM. See section 6.4.1 of the user manual. Set your router to port forward to the host's IP.
How much don't you trust that program? If that program was malicious and able to break through or disable Comodo Firewall, then it can TCP/IP connect to your host and attempt exploits.
In that case you should use Bridged networking and put a firewall on your host (and on other computers/devices on your lan) - see the link above for an explanation.