3 ms·

i want a cable modem + oss router/outbound firewall/egress logger all in one device. does such a thing exist?

by a-dub 4y ago

nathants 4y ago
1. get linux router on lan or linux vpn on wan. 2. install opensnitch or similar on 1. 3. route all traffic through 1. 4. figure out how to deal with rule management and new connection requests from 1 to wherever is most convenient for you.
- a-dub 4y ago
  i feel like i want something with full egress logging and a community driven filterset. bonus points for making it easy to install a cert on the machines in my network and capture/inspection of ssl streams. alternatively, some cloud egress point i can vpn to with outbound firewalling/logging/filtering as a service. i don't want to think about it all the time, so either community driven filters or a managed service. basically i'm interested in two things. catching malware on my personal devices and inspecting/defeating software that is gossiping too much about what appears to me to be private.
elesiuta 4y ago
I've kinda been keeping an eye on firewalla [0] since it looks pretty simple and probably good enough for home use? If anyone has any experience with it, or has looked into how good/useful the security of it is I'd love to hear it. There's also pfsense [1] and OPNsense [2] which are more geared towards business users, and personally not worth the effort for me to maintain at home, so I haven't looked into them as much. [0] https://firewalla.com/ https://firewalla.com/ [1] https://www.pfsense.org/products/ https://www.pfsense.org/products/ [2] https://shop.opnsense.com/product-categorie/hardware-appliances/ https://shop.opnsense.com/product-categorie/hardware-applian...
- Wavelets 4y ago
  I’d love to hear some feedback from any users on HN as well.
gerdesj 4y ago
I've been a pfSense fan for something like 15 years. I run something like 50-60 of them around the country (UK). In my office is a 2 node CARP beastie with six WANs and 12 NICs each (Dell R310s) and quite a lot of cabling. At home I have an APU4 humming away in the attic. I have a full IPv4 and 6 stack running and more VPNs than you can shake a stick at. The docs: https://docs.netgate.com/pfsense/en/latest/index.html https://docs.netgate.com/pfsense/en/latest/index.html are excellent. Slap on the pfblocker-ng package and you effectively have a souped up Pi-Hole in the router too. My TV at home has stopped showing adverts for certain streaming channels which is nice. There are certain strong feelings against Netgate (nee Electric Sheep Fencing) which may or may not be justified. You have Opnsense as an alternative option - it's a very well thought of fork of pfSense.
macinjosh 4y ago
OpenWRT

i want a cable modem + oss router/outbound firewall/egress logger all in one device. does such a thing exist?

by a-dub 4y ago

i want a cable modem + oss router/outbound firewall/egress logger all in one device. does such a thing exist?

1. get linux router on lan or linux vpn on wan. 2. install opensnitch or similar on 1. 3. route all traffic through 1. 4. figure out how to deal with rule management and new connection requests from 1 to wherever is most convenient for you.

a-dub 4y ago
i feel like i want something with full egress logging and a community driven filterset. bonus points for making it easy to install a cert on the machines in my network and capture/inspection of ssl streams. alternatively, some cloud egress point i can vpn to with outbound firewalling/logging/filtering as a service. i don't want to think about it all the time, so either community driven filters or a managed service. basically i'm interested in two things. catching malware on my personal devices and inspecting/defeating software that is gossiping too much about what appears to me to be private.

elesiuta 4y ago

I've kinda been keeping an eye on firewalla [0] since it looks pretty simple and probably good enough for home use? If anyone has any experience with it, or has looked into how good/useful the security of it is I'd love to hear it. There's also pfsense [1] and OPNsense [2] which are more geared towards business users, and personally not worth the effort for me to maintain at home, so I haven't looked into them as much. [0] https://firewalla.com/ https://firewalla.com/ [1] https://www.pfsense.org/products/ https://www.pfsense.org/products/ [2] https://shop.opnsense.com/product-categorie/hardware-appliances/ https://shop.opnsense.com/product-categorie/hardware-applian...

Wavelets 4y ago
I’d love to hear some feedback from any users on HN as well.

gerdesj 4y ago

I've been a pfSense fan for something like 15 years. I run something like 50-60 of them around the country (UK). In my office is a 2 node CARP beastie with six WANs and 12 NICs each (Dell R310s) and quite a lot of cabling. At home I have an APU4 humming away in the attic. I have a full IPv4 and 6 stack running and more VPNs than you can shake a stick at. The docs: https://docs.netgate.com/pfsense/en/latest/index.html https://docs.netgate.com/pfsense/en/latest/index.html are excellent. Slap on the pfblocker-ng package and you effectively have a souped up Pi-Hole in the router too. My TV at home has stopped showing adverts for certain streaming channels which is nice. There are certain strong feelings against Netgate (nee Electric Sheep Fencing) which may or may not be justified. You have Opnsense as an alternative option - it's a very well thought of fork of pfSense.

macinjosh 4y ago

OpenWRT