6 ms·

is there any linux equivalent of pfsense+freebsd ?

fullstop 6y ago
Untangle NG Firewall, perhaps. [1] 1. https://wiki.untangle.com/index.php/NG_Firewall_Installation https://wiki.untangle.com/index.php/NG_Firewall_Installation
- sandGorgon 6y ago
  what about vyos ? https://vyos.io/products/#vyos-router https://vyos.io/products/#vyos-router
  - fullstop 6y ago
    I'm not sure why that didn't immediately come to mind. Ubiquiti products used to use vyos, but now they are their own fork.
bubblethink 6y ago
openwrt works well enough for routing, qos, adblock, vpn, etc.
- josteink 6y ago
  So what does people typically use pfSense/OPNsense for which OpenWRT can’t do, or is a bad fit for? Asking as a curious OpenWRT devotee.
  - dtx1 6y ago
    I'd say anything remotely security relevant.
    - wtallis 6y ago
      Is that based in any way on the relative capabilities and security track records of OpenWRT and pfSense, or is a highly security-conscious userbase merely what's left for pfSense after eliminating anyone who wants good WiFi support and the ability to run on cheap commodity consumer appliances with tight memory and storage limits?
      - dtx1 6y ago
        Both I suspect. OpenWRT sacrifices safety to work on low power devices i.e. no https package updates.
        josteink 6y ago
        For obvious reasons (targeting embedded devices with limited flash) it's not the default, but for devices which can support it, HTTPS is easily enabled. opkg install wget ca-bundle sed -i "s/http/https/" /etc/opkg/distfeeds.conf Done. And now packages have cryptographic signatures verified and are downloaded over HTTPS. Are there other things pfSense can offer me? :) (Thanks for giving me the push, btw)
thaumasiotes 6y ago
OpenWrt? I'd be interested to know what the differences are.
- pimeys 6y ago
  OpenWrt is more of a replacement for the market routers. It's a nice Linux-based router distro with a good/great ui in LuCI. The downside of this is that upgrading OpenWRT is a bit similar than upgrading a closed-source OS of the consumer routers: you flash it and you must reinstall all packages after the upgrade. This means an upgrade between major versions is maybe a bit too much of work. OPNsense/pfSense have similar upgrade strategies as FreeBSD has: you upgrade the core os to the latest version, then all ports. This is usually a really simple and kind of boring system, which is something you really value in a computer that manages your whole house's internet traffic...
purpleidea 6y ago
linux+shorewall is far superior. I'm even using it with wireguard actually. Everyone that preferred pfsense, never tried shorewall.
1MachineElf 6y ago
Peraps IPFire? https://www.ipfire.org/ https://www.ipfire.org/

Untangle NG Firewall, perhaps. [1] 1. https://wiki.untangle.com/index.php/NG_Firewall_Installation https://wiki.untangle.com/index.php/NG_Firewall_Installation

sandGorgon 6y ago
what about vyos ? https://vyos.io/products/#vyos-router https://vyos.io/products/#vyos-router
- fullstop 6y ago
  I'm not sure why that didn't immediately come to mind. Ubiquiti products used to use vyos, but now they are their own fork.

bubblethink 6y ago

openwrt works well enough for routing, qos, adblock, vpn, etc.

josteink 6y ago
So what does people typically use pfSense/OPNsense for which OpenWRT can’t do, or is a bad fit for? Asking as a curious OpenWRT devotee.
- dtx1 6y ago
  I'd say anything remotely security relevant.
  - wtallis 6y ago
    Is that based in any way on the relative capabilities and security track records of OpenWRT and pfSense, or is a highly security-conscious userbase merely what's left for pfSense after eliminating anyone who wants good WiFi support and the ability to run on cheap commodity consumer appliances with tight memory and storage limits?
    - dtx1 6y ago
      Both I suspect. OpenWRT sacrifices safety to work on low power devices i.e. no https package updates.
      - josteink 6y ago
        For obvious reasons (targeting embedded devices with limited flash) it's not the default, but for devices which can support it, HTTPS is easily enabled. opkg install wget ca-bundle sed -i "s/http/https/" /etc/opkg/distfeeds.conf Done. And now packages have cryptographic signatures verified and are downloaded over HTTPS. Are there other things pfSense can offer me? :) (Thanks for giving me the push, btw)

thaumasiotes 6y ago

OpenWrt? I'd be interested to know what the differences are.

pimeys 6y ago
OpenWrt is more of a replacement for the market routers. It's a nice Linux-based router distro with a good/great ui in LuCI. The downside of this is that upgrading OpenWRT is a bit similar than upgrading a closed-source OS of the consumer routers: you flash it and you must reinstall all packages after the upgrade. This means an upgrade between major versions is maybe a bit too much of work. OPNsense/pfSense have similar upgrade strategies as FreeBSD has: you upgrade the core os to the latest version, then all ports. This is usually a really simple and kind of boring system, which is something you really value in a computer that manages your whole house's internet traffic...

purpleidea 6y ago

linux+shorewall is far superior. I'm even using it with wireguard actually. Everyone that preferred pfsense, never tried shorewall.

1MachineElf 6y ago

Peraps IPFire? https://www.ipfire.org/ https://www.ipfire.org/