4 ms·
Agreed. I've taken to treating my linux installs like I used to treat Windows: no internet access expect application specific. For example, I run a Visionfive
by hasselhoftd 2y ago
Agreed. I've taken to treating my linux installs like I used to treat Windows: no internet access expect application specific.
For example, I run a Visionfive 2 OpenBSD install with squid, everything else has to go through that.
- cyberpunk 2y agoCurious why squid and not pf?
- Khaine 2y agosquid is a http(s) proxy and pf is a firewall. They do not do the same thing.
- cyberpunk 2y agoI assumed it wasn’t doing tls interception as simply using it to allow/disallow internet traffic from various internal hosts — pf works for that also. Relayd also does a bunch of similar things and is closely integrated with pf too..
- Khaine 2y agoThat's fair. I assumed he was using squid to filter/block ads and dodgy websites. You can also kind of do this with pf, but not as well.
- hasselhoftd 2y ago[dead]