I have just recognised that my KVM dmz-guest connected to an isolated virtual network is always reachable from the KVM host. How can I completely isolate the guest from the host?
I have another KVM guest, a virtualised firewall which is bridged to physical interfaces and also to the virtual network.
I want that my KVM host is accessing the dmz-guest through my virtualised firewall. How is that possible?
My next concern is that this feature is affecting my bridges? For example, has the KVM host access to my external network connected to Internet without passing through my virtualised firewall? I have not configured a IP-address for the KVM host on the bridged networks in etc/networking/interfaces.
I have another KVM guest, a virtualised firewall which is bridged to physical interfaces and also to the virtual network.
I want that my KVM host is accessing the dmz-guest through my virtualised firewall. How is that possible?
My next concern is that this feature is affecting my bridges? For example, has the KVM host access to my external network connected to Internet without passing through my virtualised firewall? I have not configured a IP-address for the KVM host on the bridged networks in etc/networking/interfaces.