| |
|
 |
|
 |
|
|
|
| |
|
|
xen-users
Re: [Xen-users] Re: firewalls and Xen
Molle Bestefich wrote:
>
>
> I'm thinking that if one domU is breached, a hacker will have total
> freedom to poke at any ports on any of the other domUs regardless of
> the firewall.
I disagree.In the topology presented in
http://www.shorewall.net/XenMyWay.html, a breach of the most vulnerable
domU (the 'lists' domain) cannot compromise any of the other domUs or
the dom0 or any of the local systems.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@xxxxxxxxxxxxx
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
| |
|
Home