VMware, Inc. 307
Chapter 15 Advanced Virtual Networking
Ifthehostcomputerhasmultiplenetworkadapters,itmightbeintentionally
configuredtouseIPforwarding.Ifthatisthecase,youdonotwanttodisable
forwarding.Toavoidpacketleakage,youmustenableapacketfilteringfacility and
specifythatpacketsfromthehost‐onlynetworkshouldnotbese
ntoutsidethehost
compu
ter.Consultyouroperatingsystemdocumentationfordetailsonhowto
configurepacketfiltering.
Disable Packet Forwarding on Windows Hosts
SystemsusingserverversionsofWindowsoperatingsystemscanforwar dIPpackets
thatarenotaddressedtothem.Bydefault,thesesystemsandWindowsVistaand
Windows7systemshaveIPpacketforwardingdisabled.IPforwardingisnota
problemonWindows XPProfessionalorWindows XPHomeEditionhosts.
Ifyoufindpacketsleakingfromahost‐onlynetw
orkonaWindowshostcomputer,
checkwhetherforwardingwasenabledonthehostmachine.Ifitisenabled,disableit.
To disable packet forwarding on Windows hosts
Dooneofthefollowing:
StoptheRoutingandRemoteAccessservice:
a ChooseStart>Runandenterservices.mscintheRundialogbox.
bIntheServiceswindowthatappears,disabletheRoutingandRemoteAccess
service.
UseWindowsAdministrativeToolstodisableroutingandremoteaccess:
aOnaWindows2003Serverhost,chooseStart>Programs>Administrative
Tools>RoutingandRemoteAccess.
Aniconontheleftislabeledwiththehostname.Ifagreendotappearsover
theicon,IPforwardingisturnedon.
bT
oturnoffIPforw
arding,right‐clicktheiconanddisableRoutingand
RemoteAccess.
Areddotappears,indicatingthatIPforwardingisdisabled.
Comentários a estes Manuais