Creating a sandbox isolated from the network


Recommended Posts

Hi,

 

Just looking for the easiest approach here, I created a VM with virbr0 in unRAID so it's sitting in the 192.168.122.x segment which is fine. However it can still ping my LAN IPs including unRAID, but not the hostnames. Now, I would like to prevent that, since that VM is for testing purposes and I don't want it to propagate through my network.

 

I'm aware I could mess around with my router to get the work done, but I was wondering if I could just use unRAID's iptables to make a rule to block local connections to the rest of my LAN. Since such a rule would indirectly prevent the VM from accessing its host, I'm thinking it would be safe enough for most purposes?

 

I have no experience at all with iptables, so excuse my ignorance if such a solution is either impossible or not safe at all.

Edited by dnLL
Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.