3 ms·
Huh. Maybe I'm naive, but wouldn't iptables block it? Default rules on the host box that this VM runs on include: -A OUTPUT -o eth0 -d 192.168.1.0/24 -j
by mirimir 7y ago
Huh.
Maybe I'm naive, but wouldn't iptables block it?
Default rules on the host box that this VM runs on include:
-A OUTPUT -o eth0 -d 192.168.1.0/24 -j ACCEPT
-A OUTPUT -o eth0 -d 1.2.3.4/32 -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A OUTPUT -j DROP
With 1.2.3.4 being the VPN server that I'm using. And VirtualBox doesn't have USB enabled.
And if I weren't using a VPN, it'd be:
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -j DROP
So nothing would use a new interface, no matter what routing it promised. And even in Windows, decent VPN client apps use rules that are basically analogous to those.