Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a KVM on Ubuntu as a home server. My gateway is a VM with WAN interface connected to the bridge configured as

auto eth1
iface eth1 inet manual

auto br1
iface br1 inet manual
    bridge_ports eth1
    bridge_stp off
    bridge_fd 0
    bridge_maxwait 0

Ethernet cable from my ISP is connected to eth1. I wasn't able to find proper network configuration for this scenario. Can evil people get access to my host through this interface? I have no nuclear secrets here, but anyway.

share|improve this question

migrated from Jul 13 '10 at 22:49

This question came from our site for system and network administrators.

up vote 2 down vote accepted

This probably depends on your ISP and what type of connection you have, but if you don't have an IP configured, you are probably pretty safe. If your ISP happens to allow other protocols down the wire (most don't), then you might be vulnerable through one of them, if it were configured.

EDIT: To answer the question in the comments, I believe ifconfig will show you what protocols are on a NIC (someone please chime in if you think otherwise). Notice that I've got IPV4 (inet) and IPV6 (inet6) on mine:

root@INFRA:~# ifconfig eth0 
eth0      Link encap:Ethernet  HWaddr 00:0c:29:aa:bb:cc  
          inet addr:10.X.X.2  Bcast:10.X.X.255  Mask:
          inet6 addr: fe80::aaa:fff:ddd:bbbb/64 Scope:Link
          RX packets:46403049 errors:0 dropped:0 overruns:0 frame:0
          TX packets:54127522 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:16294573928 (16.2 GB)  TX bytes:52118956524 (52.1 GB)
share|improve this answer
My gateway VM gets IP address through DHCP from my ISP. How can I check if other protocols (which?) are configured? – Art Shayderov Jul 13 '10 at 19:37
There are a variety of layer 2 protocols that are still usable on an IP-less network interface. However, those are very unlikely to be around on a residential ISP connection. – SysAdmin1138 Jul 13 '10 at 21:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .