Home firewall poll

Discussion in 'Networking' started by cheezehead, Feb 3, 2017.

?

What firewall do you run at home?

Poll closed Mar 5, 2017.
  1. pfSense

    56.3%
  2. Ubiquiti

    16.7%
  3. Sophos UTM

    15.6%
  4. Enterprise COTS (Cisco/Palo Alto/CheckPoint/Juniper/ect)

    10.4%
  5. SMB COTS (Sonicwall/Watchguard/ect)

    3.1%
  6. Netgear/Linksys/Belkin....what's cheap at the big box stores

    3.1%
  7. Straight IPTables/PF or bust!

    10.4%
Multiple votes are allowed.
  1. cheezehead

    cheezehead Active Member

    Joined:
    Sep 23, 2012
    Messages:
    698
    Likes Received:
    169
    With some of the recent talks/posts, curious as to what everyone is running for their home firewall? Poll is open for the next month. You can choose up to two in the event your homelab is different from your main home firewall.
     
    #1
  2. TuxDude

    TuxDude Well-Known Member

    Joined:
    Sep 17, 2011
    Messages:
    615
    Likes Received:
    336
    I've started to play around with VyOS a little bit - but its not in any real use yet. And there's no poll option to pick it as a second.
     
    #2
    Cole likes this.
  3. StammesOpfer

    StammesOpfer Active Member

    Joined:
    Mar 15, 2016
    Messages:
    378
    Likes Received:
    122
    Forgot about Smoothwall, IPcop, Untangled, Zentyal, ClearOS, OpenWRT (x86), Sophos XG and then there is the Alt firmware of OpenWRT, DD-WRT, Tomato. I'm sure I am missing a few dozen.

    But USG and pfSense for me. I've been meaning to try Sophos UTM but have run all of the above at one point or another.
     
    #3
    Cheddoleum likes this.
  4. BLinux

    BLinux cat lover server enthusiast

    Joined:
    Jul 7, 2016
    Messages:
    2,354
    Likes Received:
    816
    I just used a stripped down CentOS7 customized to my needs. No gui or anything, everything CLI. Although I see the appeal of well "packaged" solutions, I'm generally not a fan. I prefer to have the flexibility when I need something that's not part of the "packaged" deal. Basically, don't like to be limited by a project's or product's "feature list". But, I recognize I'm in the minority. 16yrs ago, I created a custom Linux distro that booted off a mini-CD and ran completely in RAM while saving config data to some writable medium - I actually really liked that kind of setup since you never have to worry about "state" and can yank the power cord knowing it'll boot right up to the same exact state. I was in the middle of doing a similar customization on CentOS 7, but systemd complicated some things and I've put that project on hold until I have more time.
     
    #4
  5. brendantay

    brendantay Member

    Joined:
    Aug 12, 2015
    Messages:
    127
    Likes Received:
    17
    + untangled - probably going to use that over PFsense on the new router soley for pretty graphs and application blocking haha.
     
    #5
  6. wildchild

    wildchild Active Member

    Joined:
    Feb 4, 2014
    Messages:
    394
    Likes Received:
    57
    Still using my juniper ssg520m cluster, but getting ready to switch over to vyos
     
    #6
  7. niekbergboer

    niekbergboer Active Member

    Joined:
    Jun 21, 2016
    Messages:
    107
    Likes Received:
    34
    pfSense, in a VM, on a Proxmox VE cluster.

    The cluster removes the single point of failure, and the great (I think) thing about pfSense is that its entire configuration can be backed up and restored as a single XML file.
     
    #7
  8. sullivan

    sullivan New Member

    Joined:
    Mar 27, 2016
    Messages:
    24
    Likes Received:
    16
    I use a Mikrotik router. It provides nearly all of the capabilities of Linux IP tables with a web or command-line UI. The hardware is very inexpensive, low-power, and reliable (Linux-based OS kernel running on an embedded MIPS/ARM/PPC SoC). Unfortunately, the documentation has always been weak. So you may need to already know a fair amount about Linux networking to make good use of their systems.
     
    #8
  9. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    505
    Likes Received:
    117
    Been running a standalone home router since 2003, before that I just used a server that did firewall/nat along with whatever else it was doing. That was a soekris net4501, originally running linux off an 8MB compact flash card, got switched to openbsd in 2009 (with a bigger drive) to add some platform diversity. The same basic config from '09 got moved to an APU in 2014 because the net4501 couldn't handle the bump to 25Mbps on PPPoE. The 4501's still running as an NTP server, mainly for nostalgia. :)
     
    #9
  10. mason736

    mason736 Member

    Joined:
    Mar 17, 2013
    Messages:
    109
    Likes Received:
    1
    I'm a big fan of Sophos XG. The recent update to the interface was a much needed refresh. I run it in a vm on Hyper V 2012 r2.


    Sent from my iPhone using Tapatalk
     
    #10
  11. capn_pineapple

    capn_pineapple Active Member

    Joined:
    Aug 28, 2013
    Messages:
    356
    Likes Received:
    80
    I'm currently using a free Meraki MX64. When that comes off license though I'll probably jump back on either pfSense or Sophos.
     
    #11
  12. CreoleLakerFan

    CreoleLakerFan Active Member

    Joined:
    Oct 29, 2013
    Messages:
    466
    Likes Received:
    169
    ASA 5506x ...
     
    #12
  13. nitrobass24

    nitrobass24 Moderator

    Joined:
    Dec 26, 2010
    Messages:
    1,081
    Likes Received:
    125
    Sophos UTM 9


    Sent from my iPhone using Tapatalk
     
    #13
  14. chilipepperz

    chilipepperz Active Member

    Joined:
    Mar 17, 2016
    Messages:
    204
    Likes Received:
    61
    Where does Fortinet fit?
     
    #14
  15. Jon Massey

    Jon Massey Active Member

    Joined:
    Nov 11, 2015
    Messages:
    340
    Likes Received:
    81
    Draytek at home (which I guess classes as SMB COTS), Sonicwall & ubnt at work.
     
    #15
  16. maze

    maze Active Member

    Joined:
    Apr 27, 2013
    Messages:
    541
    Likes Received:
    77
    Upgraded to the new "switchport-bridge-enabled" iOS yet?

    Ontop the paper so it doesnt fly away? :)
    - sorry, really dont like fortinet at all.. having one box for * is - imho - very consumer grade but they still want to be enterprise stuff

    *let the religion war begin*
     
    #16
    Last edited: Feb 6, 2017
    brendantay likes this.
  17. CreoleLakerFan

    CreoleLakerFan Active Member

    Joined:
    Oct 29, 2013
    Messages:
    466
    Likes Received:
    169
    Nope, wasn't aware there was one available ... I did a quick Google search and didn't get any hits relating to 5506-x (other than the old ones of people complaining about it).

    Got any more info?
     
    #17
  18. CreoleLakerFan

    CreoleLakerFan Active Member

    Joined:
    Oct 29, 2013
    Messages:
    466
    Likes Received:
    169
    Oh, just checked the release notes from 9.7.1

    Sweet!
     
    #18
    maze likes this.
  19. maze

    maze Active Member

    Joined:
    Apr 27, 2013
    Messages:
    541
    Likes Received:
    77
    Havent gotten around to messing with it myself yet. But please do share your experiences - like the load when moving full 1g traffic between internal ports :)
     
    #19
  20. Cheddoleum

    Cheddoleum Member

    Joined:
    Feb 19, 2014
    Messages:
    84
    Likes Received:
    16
    This puzzled me too: surely the router of choice for most knowledgeable home users is the well-vetted consumer router reflashed with third party firmware. OpenWRT now has the CeroWRT bufferbloat fixes backported and if I wasn't treating edge routing and firewalling as a subfeature set of a more elaborate network appliance I'd still be doing it too.
     
    #20
Similar Threads: Home firewall
Forum Title Date
Networking Home Build of Firewall / Monitor Help Dec 27, 2017
Networking Help me pick a replacement home firewall/router Jan 30, 2016
Networking Firewall for home Jun 15, 2011
Networking Help with home 10GbE network (10Gbase-T and SFP+) Nov 19, 2019
Networking Home cabling Cat7/8 and or Fibre? Nov 10, 2019

Share This Page