Re: Can we run a qemu instance as a dedicated home network firewall?

From: "Douglas A. Tutty" <dtutty@xxxxxxxxxxxxx>
Date: Sun, 30 Mar 2008 14:04:59 -0400

On Sun, Mar 30, 2008 at 11:20:26AM -0400, Mitchell Laks wrote:

Can we use a virtual qemu linux machine as a firewall for
a real home network?

Well, on normal i386 hardware (unlike e.g. Zseries with LPARs),
virtualization doesn't gain you any security really. Think of it this
way: the only way an attacker can break the firewall if its running
natively on the one box, is a bug in the kernel. With virtualizaiton,
you're relying on both no bugs in the kernel and no bugs in the quemu.

This comes up a lot on misc@xxxxxxxxxxxx Their analysis shoes that it
decreases security to use software virtualization.

Those old 486s didn't themselves take much power. If the problem is
noise, you could replace the drives with industrial CF cards for the
firewall.

doug.

--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Follow-Ups:
- Re: Can we run a qemu instance as a dedicated home network firewall?
  - From: Mitchell Laks

References:
- Can we run a qemu instance as a dedicated home network firewall?
  - From: Mitchell Laks

Prev by Date: Re: Reg Blind
Next by Date: Re: most lightweight debian server
Previous by thread: Can we run a qemu instance as a dedicated home network firewall?
Next by thread: Re: Can we run a qemu instance as a dedicated home network firewall?
Index(es):
- Date
- Thread

Relevant Pages

Re: Can we run a qemu instance as a dedicated home network firewall?
... virtualization doesn't gain you any security really. ... you're relying on both
no bugs in the kernel and no bugs in the quemu. ... I see cf-hard drive adapters and drives
are very cheap. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
(Debian-User)
RE: Ideas for studentes
... I work as a Security Specialist for one of the largest Banks in the ... Any
idea on how virtual labs could be set up using VMware or others ... virtualization applications?
... firewalls and routers setup, but also go deeply into secure setup, ... (Security-Basics)
Re: Server virtualization and security?
... I know that virtualization is seen as a great solution to managing the ... My
question is from the security and anti-hacking protection ... Full escape from a VMWare
virtual machine was apparently demonstrated ... I saw a talk by SANS handler Tom Liston
who was ... (comp.security.misc)
Re: Create dual system by virtualization software to enhance the security?
... I get a scripting error and a prompt to see ... Microsoft MVP (Windows Security)
... creating dual system (not dual computers) by virtualization software ...
(microsoft.public.security)
Re: Create dual system by virtualization software to enhance the security?
... What do you mean by "there are ways detect that an execution is taking ... Microsoft
MVP (Windows Security) ... creating dual system (not dual computers) by virtualization
software ... (microsoft.public.security)