[Xen-users] Re: firewalls and Xen

["Molle Bestefich" <molle.bestefich@xxxxxxxxx>]

Patrick Wolfe wrote:
> +-------+   +---------+               +-----------+
> | peth0 |---| br0eth0 |       +-------|veth0 dom0 |
> +-------+   +---------+       |       +-----------+
>                  |            |
>             +--eth0--+        |
>             |        |        |
>             |        e        |
>             | fire1  t   +--------+   +-----------+
>             | domU1  h---| br2dmz |---|eth0 domU2 |
>             |        2   +--------+   +-----------+
>             |        |        |
>             +--eth1--+        |
>                  |            |
> +-------+   +---------+       |       +-----------+
> | peth1 |---| br1eth1 |       +-------|eth0 domU3 |
> +-------+   +---------+               +-----------+
Don't you find it troublesome that all of your domUs can communicate
freely with each other?

I'm thinking that if one domU is breached, a hacker will have total
freedom to poke at any ports on any of the other domUs regardless of
the firewall.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users