Shorewall users - Jun 2012 - Guest OS in VirtualBox uses openVPN connection only

Hello guys,
I''m happy user of Shorewall as a simple home router with 2 ISP - works
quite well. But now I am facing a task I can''t solve myself:
Problem is descibed here
http://serverfault.com/questions/234154/how-to-route-traffic-from-a-virtualbox-vm-only-over-a-vpn(not
my post) - including a solution concept using iptables directly. I
want to configure it via Shorewall but don''t know how :(. Would be
anybody
so kind and give me some hints (I thing step-by-step guide is not
necessary)?

More details:
I have Debian Squeeze on both VirtualBox host and guest. Shorewall
(4.5.5.1) runs on the host as same as openVPN client connection (in TUN
mode). What I want is that guest Debian could connect only through OpenVPN
connection - if established. If VPN is down -> no connectivity for guest.
Additionally host shouldn''t be allowed to use VPN connection anyhow. I
don''t want to establish VPN connecion in guest to make sure that no
traffic
can leave it if VPN is down.

I hope I described my problem clearly enough and somebody will try to help.

Anyway many thanks to developers of Shorewall for excelent work!
Thanks Jan


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today''s security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Jan Schrötter wrote:
> Hello guys, I'm happy user of Shorewall as a simple home router with
> 2 ISP - works quite well. But now I am facing a task I can't solve
> myself: Problem is descibed here
>
http://serverfault.com/questions/234154/how-to-route-traffic-from-a-virtualbox-vm-only-over-a-vpn
> (not my post) - including a solution concept using iptables directly.
> I want to configure it via Shorewall but don't know how :(. Would be
> anybody so kind and give me some hints (I thing step-by-step guide is
> not necessary)?
The solution in that article is nonsense.
> 
> More details: I have Debian Squeeze on both VirtualBox host and
> guest. Shorewall (4.5.5.1) runs on the host as same as openVPN client
> connection (in TUN mode). What I want is that guest Debian could
> connect only through OpenVPN connection - if established. If VPN is
> down -> no connectivity for guest. Additionally host shouldn't be
> allowed to use VPN connection anyhow. I don't want to establish VPN
> connecion in guest to make sure that no traffic can leave it if VPN
> is down.
> 
> I hope I described my problem clearly enough and somebody will try to
> help.
If you will forward the output of 'shorewall dump' as a compressed
attachment, we can advise you how to accomplish what you ask.

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users