Zones: Different subnets securely

Guys (repost from the wrong forum),

with Solaris 10 and Zones, is it possible to lock a zone to a particular physical network interface? Is it possible that only that zone (and not the root zone) has access to that particular interface?

I'm wondering about the suitablity of Solaris 10 on a v210/v240 class system that has 4 ethernet ports, and how from a security perspective it might be possible to safely attach this system to different subnets, some maybe on the DMZ, doing web service things like apache and sendmail and whatnot.

Thoughts?

-jason

[590 byte] By [heavyj] at [2007-11-26 0:45:29]