Thanks, I hadn't heard that. I'll look into it. I'm not too worried. I do firewall everything that's not necessary, at every level. That is, the host machine r

Thanks, I hadn't heard that. I'll look into it. I'm not too worried. I do firewall everything that's not necessary, at every level. That is, the host machine runs a VPN client, and iptables only allows traffic to the VPN server. So any VirtualBox traffic is using that VPN service. All of the pfSense VMs in my nested VPN chains have pf rules that do the same. And I doubt that VirtualBox would be routing traffic through them. But I'll check. I'll probably use KVM for my next VM host. The tools have improved a lot in recent years. And I've become a lot more comfortable managing stuff in terminal.