What do you run; Opnsense, pfsense, Smoothwall, maybe a WAF like wazuh?

Today was update/audit firewall day. I’m running a standalone instance of pFsense on a Protectli Vault FW4B - 4 Port - Intel Quad Core - 8GB RAM - 120GB mSATA SSD with unbound, pfBlockerNG, Suricata, ntopng, and heavily filtered. I did bump the swap to 8 GB as I’ve previously noticed a few ‘out of swap’ errors under load.

Before I signed off, I ran it through a couple porn sites to see if my adblocking strategy was working. Not one intrusive ad. Sweet!

Show me what you got.

  • irmadlad@lemmy.worldOP
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 days ago

    The last stats I remember reading cited some 1.5 million home networks are compromised on a daily basis. Some people, such as myself, run more complex services on their local servers that are perhaps tied into remotes such as VPS. You’ll see a lot of selfhosters with rather elaborate firewall defenses set up. I self host a lot of services I use that the ‘normal family home’ would outsource to public entities. I have a rack in the closet and several VPS, so I need something more than just Windows Firewall, or similar, that I can dial in to my unique environment.

    Also, because I can.

    • PlutoniumAcid@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      2 days ago

      Valid! I also tinker with selfhosting using Docker containers, didn’t think of firewalls the same way. Thank you.

        • PlutoniumAcid@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          edit-2
          1 day ago

          Nothing spectacular.

          Git, Paperless, UniFi Controller, Pihole, Mattermost chat, Immich, Home Assistant, Frigate, Syncthing, Hoarder. Just stuff for myself, my home, and my friends. And 🏴‍☠️

          And you?

          • irmadlad@lemmy.worldOP
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 day ago

            The usual. Might be a few I’ve missed:

            • Homarr
            • Code-server
            • Netdata
            • Searxng
            • Change-detection
            • Readeck
            • Checkcle
            • Duckdns
            • Obsidian
            • Dozzle
            • Loki-promtail-1
            • Loki-loki-1
            • Root-influxdb2-1
            • Cadvisor-redis
            • Dbeaver
            • Pairdrop
            • Speedtest-tracker
            • Btop-plus-plus
            • Portainer
            • Grocy
            • Loki-grafana-1
            • Cup
            • Web-check
            • Omni-tools
            • Cadvisor-prometheus
            • Watchtower-fork
            • Barcode-buddy
            • Ittools
            • Nessus
            • Dockerbot
            • Fusion
            • Bytestash
            • Uptime-kuma
            • Karakeep-web
            • Karakeep-chrome
            • Karakeep-meili
            • Cadvisor
            • Gitlab
            • RocketChat
            • Anonaddy
            • Etherpad
            • Archivebox
            • FreshRSS
            • FileStash
            • piHole
            • LAMP Stack
            • UnRaid
            • Proxmox