manbytesgnu_site

Source files for manbytesgnu.org
git clone git://holbrook.no/manbytesgnu_site.git
Info | Log | Files | Refs

20220102_qemu_host_fw.rst (503B)

      1 Isolating qemu networking from host
      2 ###################################
      3 
      4 :date: 2022-01-02 13:17:55
      5 :category: Offlining
      6 :author: Louis Holbrook
      7 :tags: qemu,network,iptables
      8 :slug: qemu-host-fw
      9 :summary: Making sure qemu does not have access to the hidden host ports
     10 :lang: en
     11 :status: draft
     12 
     13 .. code-block: bash
     14 
     15         iptables -N QEMU
     16         iptables -A OUTPUT -o lo -m owner --gid-owner 1009 -j QEMU
     17         iptables -A QEMU -d 127.0.0.1/32 -j LOG
     18         iptables -A QEMU -d 127.0.0.1/32 -j DROP