Running a Windows VM on KVM, how do I restrict network access to specific applications instead of the entire OS?

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨MigratingtoLemmy@lemmy.world⁩ to ⁨selfhosted@lemmy.world⁩

Hi everyone,

Is there any way to restrict network access for a Windows VM using KVM other than a couple of applications (Windows explorer and Firefox)? I don’t want to get into configuring the Windows firewall and would like to do this using KVM/other linux utilities on the host machine if possible. How would I be able to achieve this?

Thanks!

source

Comments

Sort:hotnew top

HybridSarcasm@lemmy.hybridsarcasm.xyz ⁨1⁩ ⁨year⁩ ago
You’ll have to accomplish that with a firewall on the OS. A network firewall could restrict traffic based on ports, but your apps aren’t that predictable.

source
- MigratingtoLemmy@lemmy.world ⁨1⁩ ⁨year⁩ ago
  I see, I don’t have a choice then. I will only really access the internet using Firefox, whilst the file explorer will be allowed to map a network drive on my LAN.
  
  This is an issue that I’ve been thinking of but can’t come up with anything!
  
  source
  - e0qdk@kbin.social ⁨1⁩ ⁨year⁩ ago
    You could try configuring Firefox to access the internet through a proxy and then block the VM off from everything except the proxy and your network mount with a firewall (outside the VM).
    
    source
    -> View More Comments
WheelcharArtist@lemmy.world ⁨1⁩ ⁨year⁩ ago
Simplewall firewall in windows vm?

source
- MigratingtoLemmy@lemmy.world ⁨1⁩ ⁨year⁩ ago
  Thank you, this is very interesting. I’ll take a look!
  
  source