Security question

newuser23333

New Member
Sep 4, 2024
1
0
1
I apologize in advance for any silly and seemingly simple questions, but I am new to this. I have virtual machines with static IP addresses connected to vmbr0. The MAC filter option is enabled in the firewall for all machines, and I have also created rules for each VM that allow sending/receiving packets only to the permitted address. My task is to ensure that the machines do not see each other's traffic, and I checked with tcpdump and indeed see nothing except ARP packets. Do I need to take any further actions to segment the network, or is it already safe in the context that VM1 cannot influence VM2 in any way ? (in the context that they both use vmbr0)
 
You can restrict more your traffic by adapting your netmask!

IF all vm are on same subnet like
192.168.10.10
192.168.10.11
192.168.10.12

And the netmask is /24 (255.255.255.0) of course VM can see other vm!

But if you restrict netmask by vm itself like /32 (255.255.255.255) on this case vm never see other