full-disclosure - Re: vswitches: physical networks obsolete?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4D4EB6AE.9080805@luigirosa.com>
Date: Sun, 06 Feb 2011 15:56:46 +0100
From: Luigi Rosa <lists@...girosa.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: vswitches: physical networks obsolete?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

phocean said the following on 06/02/11 15:47:

> I would like to get some feedback about the vswitches and how to deal
> with physical network separation.

vmware certifies the solution "DMZ+LAN" within a single vmware host with two
vswitches.

This is of course true until proven false, that is sending IP packets from the
LAN or DMZ to Internet and viceversa bypassing the firewall protection.

If you keep the netwok separated you bet that another piece of code (the
firewall) could not be compromised.

Ciao,
luigi

- -- 
/
+--[Luigi Rosa]--
\

There is always free cheese in a mousetrap.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1OtqsACgkQ3kWu7Tfl6ZRP6gCgmkXXMpmMPqBeWRX0q+uhNkGG
1aMAnRUPUWM5PmGAyk2YONKeCFqgNPIu
=Ml8P
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/