NAT or Bridge which is more secure ?

This is for discussing general topics about how to use VirtualBox.
Post Reply
jakes9x
Posts: 7
Joined: 29. Oct 2010, 17:00
Primary OS: MS Windows XP
VBox Version: OSE other
Guest OSses: windows xp

NAT or Bridge which is more secure ?

Post by jakes9x »

Also;
Which of these will give me a different ip address NAT , Bridge Networking or Host only networking ?
I am using windows xp pro on both guest and the host.
Sasquatch
Volunteer
Posts: 17798
Joined: 17. Mar 2008, 13:41
Primary OS: Debian other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Windows XP, Windows 7, Linux
Location: /dev/random

Re: NAT or Bridge which is more secure ?

Post by Sasquatch »

And you goal being?
Read the Forum Posting Guide before opening a topic.
VirtualBox FAQ: Check this before asking questions.
Online User Manual: A must read if you want to know what we're talking about.
Howto: Install Linux Guest Additions
Howto: Use Shared Folders on Linux Guest
See the Tutorials and FAQ section at the top of the Forum for more guides.
Try searching the forums first with Google and add the site filter for this forum.
E.g. install guest additions site:forums.virtualbox.org

Retired from this Forum since OSSO introduction.
jakes9x
Posts: 7
Joined: 29. Oct 2010, 17:00
Primary OS: MS Windows XP
VBox Version: OSE other
Guest OSses: windows xp

Re: NAT or Bridge which is more secure ?

Post by jakes9x »

i use virtualbox for testing purposes.

I am asking this in gernal which is more secure NAT or Bridge
Sasquatch
Volunteer
Posts: 17798
Joined: 17. Mar 2008, 13:41
Primary OS: Debian other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Windows XP, Windows 7, Linux
Location: /dev/random

Re: NAT or Bridge which is more secure ?

Post by Sasquatch »

It's still a matter of what situation you're going to create. If you just read chapter 6 of the User Manual, you may answer it yourself.
Read the Forum Posting Guide before opening a topic.
VirtualBox FAQ: Check this before asking questions.
Online User Manual: A must read if you want to know what we're talking about.
Howto: Install Linux Guest Additions
Howto: Use Shared Folders on Linux Guest
See the Tutorials and FAQ section at the top of the Forum for more guides.
Try searching the forums first with Google and add the site filter for this forum.
E.g. install guest additions site:forums.virtualbox.org

Retired from this Forum since OSSO introduction.
HubTou
Posts: 93
Joined: 24. Nov 2009, 11:01
Primary OS: FreeBSD
VBox Version: OSE other
Guest OSses: FreeBSD, OpenSolaris, and several Linuxes

Re: NAT or Bridge which is more secure ?

Post by HubTou »

Hello,

In a server context:
With brigded networking, all the TCP/UDP ports inside your VM are visible to the outside world, with NAT/PAT you have to declare them explicitely, which would be more secure (but could also be done with a firewall in the host or elsewhere).

In a client context:
It's not mandatory to declare a network card or connect the virtual network cable in the VM. After that you can select host only networking if you only intend to communicate with the host. Then it's usually easier and cleaner to use bridged networking rather than NAT if you have a DHCP server in your LAN.
jakes9x wrote:Which of these will give me a different ip address NAT , Bridge Networking or Host only networking ?
In the VM, all of them. Viewed from the LAN, bridged networking. Viewed from the WAN, none of them.
jakes9x wrote:I am using windows xp pro on both guest and the host.
<joke>Then abandon all hope of being secure!</joke>

Best regards,

Hubert
prsym
Posts: 11
Joined: 26. Nov 2010, 06:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: netbsd

Re: NAT or Bridge which is more secure ?

Post by prsym »

the nat will share your host ip with your gues os, bridge will make your guest act like a completely separate machine. so you need to conifugure to request for an ip from your router or use a static ip. I have not been able to make host only to work the way I want it so I dont know.

In terms of crackers getting in from the network.
i would think that nat would be the most secure especially if you dont forward any guest ports, which means crackers will not be able to use your guest os or the vm as exploit point to your host. but I dont know vbox well enough to say
HubTou
Posts: 93
Joined: 24. Nov 2009, 11:01
Primary OS: FreeBSD
VBox Version: OSE other
Guest OSses: FreeBSD, OpenSolaris, and several Linuxes

Re: NAT or Bridge which is more secure ?

Post by HubTou »

Hello,
prsym wrote:In terms of crackers getting in from the network.
i would think that nat would be the most secure especially if you dont forward any guest ports, which means crackers will not be able to use your guest os or the vm as exploit point to your host. but I dont know vbox well enough to say
Even if you don't share any port in your guest, if you surf on a malicious web site or poll an email server and get some malware as a result, your guest could be compromised and could start contaminating your local network through the network. VirtualBox is not different from a physical computer in this case.

Best regards,

Hubert
Post Reply