Disable access to host's NIC allowing web navigation.

[jorgwel]

Hi,

I was trying to disable the access from my VM to my host's network interface controller.

I did it selecting the "Not connected" mode in mi VM network adapter, but the thing is that I need web navigation allowed in mi VM.

Does any body has experience in this topic? I've tried another configurations with: Internal network, generic controller and bridge adapter but ... I can't get it working.

Any help will be really appreciated.

[BillG]

I am not at all clear on what you want to do. The default setting (NAT) allows the vm to access the Internet using NAT. The bridged option allows the guest to access the Internet by using the physical NIC in the host.

How do you plan to give the vm network access without using the physical NIC in the host? If you want the vm to see a network it must do it through some physical device in the host machine. There are no virtual cables!

There are ways for the vm and the host to have their own dedicated NIC if that is what you have in mind.

[mpack]

You do not need to take any special measures to disable VM access to your physical NIC. The VM by its very nature has no access to that NIC, or to any other host device. All of the hardware which the guest "sees" is simulated.

Use the NAT network mode, as this allows the guest to use an internet browser, but gives it the least network freedom otherwise.

[jorgwel]

Thanks again guys,

The thing is that:
1.- I have configured my VM adapter as "NAT" (I've uploaded a screenshot).
2.- I've downloaded putty (since I'm inside windows VM) an I can access through ssh the VM host's and other pcs in the same network.
3.- With windows comand line (cmd) I can ping the VM host's and other pcs in the same network.

As far as I understand (thanks to your yesterday hints), the fact that you can ping a pc doesn't mean that you can get its MAC address (unless both belongs to the same network). But since the VM can ping its host and other computers in the same host's network, I belive is still risky. That's why I'm looking for alternatives to allow web navigation, but making the host's network invisible to the windows VM.

Please, if I'm asking for something impossible according to networks rules, let me know.

Thanks mpack and BillG for your help.

[mpack]

The only alternative to using a host NIC is to use a USB wireless dongle, and that will not be reliable.

Use NAT. End of story.

Anyway, why do you care if something inside the guest can see your hosts MAC address? As far as the guest is concerned, that MAC address would belong to some other PC on the same network, and what use is that?

[jorgwel]

mpack,

You're right, I'll use NAT.

Like you said, I couldn't find the use/risk of having the mac address of another computer in that context. Even if the VM can get the host's MAC address, it wont know if is talking to its host or any other computer in the network.



I hope I can help you guys sometime. I'll be around and learning so I can make it happen.

Thanks for everything.