I think a lot more people would read the thread I am about to link to if it had this title, and it is very important for people to read it. Essentially this is what the 'what is the point of VM's' thread has turned into. http://dkn255hz262ypmii.onion/index.php?topic=8524.0 Also I would like to point out that you should still be using virtualization of some sort to isolate network facing applications, if you don't go the physical isolation route.