Hey guys, I'm pretty new here and new to ASL. I'm attempting to setup a honeypot on 1 machine in a complete VMware environment, however I am having some issues with some routing and I'm really not sure where to go with it.
Here is an explination of my network:
I have everything running on one machine inside VMware. I added Astaro 6.0 with 3 interfaces. One of the interfaces are bridged to my physical network, it is able to ping out to the Internet, this is called the external interface. I gave it an IP of 192.168.0.108/24 to fit the scheme my home router uses. The other interface I labeled the management interface, I gave it an IP of 192.168.1.101/8, this is used for web management. I have a virtual Suse machine running with an IP of 192.168.1.102/8. These 2 machines are both using VMnet5 as there little private network, the Suse machine is able to access the web management interface. The third interface I've labeled internal, this interface is using an IP 10.1.1.1/8. I added a Windows XP machine unpatched etc. with an IP of 10.1.1.5/8. Both of these machines are using VMnet9. The Windows XP machine is able to ping the 10.1.1.1 interface of Astaro, the XP machine is using this as it's default gateway. I also setup a DNS proxy on the internal interface, and when I attempt to ping a hostname on the internet, it will resolve the IP. It is using my home router as the name server. So the VMnet9 10.0.0.0 network is capable of contacting my home router.
This is where my problem begins. So far I'm unable to get my Windows XP machine to access the internet. Under Astaro I've tried setting up routing and briding, but with no luck unfortanetly. I'm not quite sure what i need to do to set this up, I'm just trying stuff blindly to be honest. I'm wondering if these VMnet's are uncapable of routing between each other, but when I see that DNS is working there is definitly some routing going on.
I was wondering if someone can give me some pointers on where I need to go here. I know I'm close but I just can't get this figured out.
VMware is not going to do any routing, but it will allow you to enable routing (or NAT) in your virtual ASL setup. It sounds like you are missing that piece. Do you have a masquerade setup for your internal network?