Re: [Xen-users] Re: firewalls and Xen

[Tom Eastep <teastep@xxxxxxxxxxxxx>]

Molle Bestefich wrote:
>
> 
> I'm thinking that if one domU is breached, a hacker will have total
> freedom to poke at any ports on any of the other domUs regardless of
> the firewall.

I disagree.In the topology presented in
http://www.shorewall.net/XenMyWay.html, a breach of the most vulnerable
domU (the 'lists' domain) cannot compromise any of the other domUs or
the dom0 or any of the local systems.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@xxxxxxxxxxxxx
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users