[Qemu-devel] Re: suitability for extension encapsulation in firewall

[Eric S. Johansson]

Paul Brook wrote:

> If you use tap networking (recommended for this situation) it's just like any 
> other network interface.

what I was looking for was the ability to place the qemu tap interface on the 
same subnet as the DMZ network and outside of the firewall rules so that it 
behaves exactly the same as a machine in the DMZ.  that is, it is 
protected/blocked by the orange network rules and can access any other machine 
on the DMZ without any hindrance.  I need to think about this a bit.  Both in 
terms of how to set up a simulated firewall environment and how I would 
configure the tap interface.  I can just see myself running qemu inside of qemu 
and 3 virtual networks.

---eric