General TC > Tiny Core on Virtual Machines

software wanted: vmware player and/or virtualbox

<< < (13/19) > >>

Arslan S.:

--- Quote from: maro on October 15, 2010, 05:26:00 PM ---Arslan, have you noticed that VBox v3.2.10 has come out a few days ago? Might me worth another attempt, as they've fixed stuff for the more recent X server, so maybe as a side effect the problem you ran into is resolved as well.

--- End quote ---

yea i noticed new version i will try it as soon as possible and i will submit it even if the problem persists

Ulysses_:
I'm becoming a big TC fan now that is looks like TC is probably one step from becoming the best host for virtualization. 

The lack of usb support in virtualbox is a bit of a pain that may not be soothed with usb server/client freeware, not because usb conversion is probably a little slow but because I don't know how to configure a TC firewall so internet access is only available from VM's.  Internet access from the host is not desirable because if possible infections, whereas from VM's you just dump the VM and the infection is destroyed.

Can someone help regarding a firewall in TC and how to make it allow networking just for the usb client/server freeware and nothing else?

curaga:
Since the VMs run inside the host, it's by definition not possible to have no access from the host while being connected in the VMs.

Unless you're also running a normal desktop on the virtualization host, which is unadvisable, but iptables does allow rules based on user id. Thus one could block user tc's net access, while running the VMs as some other user.

danielibarnes:
The free USB Redirector uses port 32032 by default, but that can be changed.

Do you need instructions on basic firewall setup or just help with rules for the usb client? There are lots of examples and tutorials available.

The following rules should work (assuming a default DROP policy):

iptables -A OUTPUT -p tcp --dport 32032 -j ACCEPT
iptables -A INPUT -p tcp --sport 32032 -j ACCEPT

This simply states that outgoing packets headed for TCP port 32032 and incoming packets coming from port 32032 are allowed.

Ulysses_:
I'm trying to do the equivalent of what is possible with vmware on a windows host.  Comodo firewall is set to "Block All" but vmware bridged networking bypasses this firewall and lets VM's see the internet.  Luckily there is full usb support in vmware, so that's the end of it.  But if that usb client/server freeware was necessary, a firewall setup would be required to allow the usb client/server interface locally but block everything else on the host.

Hopefully virtualbox has the equivalent of vmware bridged networking to bypass the firewall and usb redirector is not too complex in the required iptables settings.

Anyone has virtualbox up and running?  What happens if iptables is set to block all and the guest network card to "bridged"?

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version