I’m trying to isolate an Ubuntu Desktop VM from my LAN, but give it access to the internet. In order to accomplish this, I’m trying to run Endian Firewall as a VM and put the Ubuntu VM in the EFW Green Zone. The Ubuntu VM can access the Internet, but I can also ping devices on the host LAN, which I wasn’t expecting.
Here’s what I have done:
- Set up Endian Firewall VM with two network connections – one bridged
or NAT (both tried) and one internal. - Red Zone on Endian is getting a DHCP connection from my host LAN – 10.0.0.XXX.
- Green Zone on Endian is 192.168.0.XXX.
- Set up Ubuntu VM with a single internal network connection.
- Ubuntu VM connects to Green Network through DHCP and gets an address of 192.168.0.25.
- Ubuntu VM connects to the internet OK.
- I can ping my phone on the LAN at 10.0.0.220 from the Ubuntu VM, which I wasn’t expecting.
- I set the outgoing firewall rules on the Endian VM to exclude ICMP and everything else other than HTTP/S and DNS.
- I can still ping my phone on the LAN from the Ubuntu VM.
- I cannot ping the Ubuntu VM from the VirtualBox host machine.
If anyone can shed some light, thanks in advance.
