3 ms·
I’ve been using command-line only OpenBSD installs with pf as my default firewall for my clients for years. WebUIs always felt like unnecessary attack surface f
by user3939382 6y ago
I’ve been using command-line only OpenBSD installs with pf as my default firewall for my clients for years. WebUIs always felt like unnecessary attack surface for a firewall.
- hyperpl 6y agoNot only the attack surface, but it wasn't until I tried migrating everything from pfsense to OpenBSD (firewall, dns, vpn, etc..) and started digging around did I realize how many scripts and processes are involved in managing pfsense's state. I ended up giving up and starting with OpenBSD from scratch and it didn't take me more than a couple of hours to get everything back and operational (wife tested and approved). I'm sure there's a rhyme to their reason for such a setup but I'm extremely content with the relatively few files I manage in vim with my own versioning, upgrade and backup methodology. I do admit that I sometimes miss the odd graph or html report but I'm getting more used to the logs.