Re: [Full-disclosure] vswitches: physical networks obsolete?

[Luigi Rosa <lists@xxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

phocean said the following on 06/02/11 15:47:

> I would like to get some feedback about the vswitches and how to deal
> with physical network separation.

vmware certifies the solution "DMZ+LAN" within a single vmware host with two
vswitches.

This is of course true until proven false, that is sending IP packets from the
LAN or DMZ to Internet and viceversa bypassing the firewall protection.

If you keep the netwok separated you bet that another piece of code (the
firewall) could not be compromised.




Ciao,
luigi

- -- 
/
+--[Luigi Rosa]--
\

There is always free cheese in a mousetrap.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1OtqsACgkQ3kWu7Tfl6ZRP6gCgmkXXMpmMPqBeWRX0q+uhNkGG
1aMAnRUPUWM5PmGAyk2YONKeCFqgNPIu
=Ml8P
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/