Whats the number of times the letter s appears in:
Q: Bridge virtual machines out WLAN interface It seems that my wlan card (intel 5100 AGN) firmware doesnt allow spoofing MAC addresses. This has the side effect of destroying the capability to bridge out my virtual machines on that interface. Apparently this is a common thing on wlan cards.
I can see the incoming traffic just fine in my virtual machines, but their DHCP queries dont get bridged out of the WLAN card. It works perfectly well when using the wired ethernet port.
Is there a workaround for this? MAC-NAT or something?
I dont want to route my virtual machines out to the Internet because I dont want my host OS to even have an IP address.
Im using Linux and KVM for virtualization.

A: Bridging over an 802.11 network is not as straightforward as bridging over Ethernet, and its not something a normal WiFi driver/adapter on a host would do. 
For most virtualization products, its useful to be able to remotely manage them, so I dont think youre going to get away with not having the host have an IP address. 
If you dont configure a gateway, then the VM and your guests (if youre using NAT) wont be able to communicate with anything outside your LAN. 

A: Unfortunately yes, its a common restriction on wlan cards, to prevent you from using them as repeaters or something.
Why dont you want the host to have an IP, and whats wrong with regular NAT on the host?
Something Ive thought of that might work:


*

*assign 1 virtual interface (eth0:0 etc) on the hosts wlan for each virtual machine

*assign (from a different private range) IP addresses to the vms

*use static nat to map each outside address to each inside address.


Then all the traffic that comes out of the host will be sent with the hosts MAC address.
I think you might have to assign the hosts wlan IPs statically, as DHCP will hand out one IP address per mac address.
Some security systems dont like multiple IPs on one MAC, which theres little you can do about if you dont have control of those systems.

A: If you are this paranoid about getting the host infected by something you shouldnt be using the host as intermediary between the LAN and the VM in the first place.
Dont use a VM. Use a physical machine.
If you can only carry 1 laptop, make it dual-boot. Encrypt the safe installation and make sure the un-safe install doesnt have the encryption software installed.
Yes, this will probably be inconvenient.
But remember: Safety and inconvenience are 2 sides of the same coin.

user
The text includes 135 "s"s in total.
assistant