Alexander Kabanov wrote:
> let me rephrase you question - do you want an isolated localhost IP
> address for each guest? Why would you need this?
To Minimize exposure by binding local services to a local interface?
Local interface is a simple and automatic security feature. Yes, you can block
public access with packet filtering, but that will add complexity and can not be
enabled by default.
Common examples of services which use local interface in their default
configuration: MySQL and Postfix.
Regards, Tomas
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu Oct 19 09:58:15 2006