ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Best Linux firewall

    Scheduled Pinned Locked Moved IT Discussion
    50 Posts 9 Posters 11.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      Zentyl is really an SBS style server project. A kitchen sink sorta mish mash. Not an optimized firewall.

      AmbarishrhA JaredBuschJ 2 Replies Last reply Reply Quote 1
      • AmbarishrhA
        Ambarishrh @scottalanmiller
        last edited by

        @scottalanmiller Yes, have used it in one of my freelance project. They wanted an AD replacement as they couldn't afford windows licensing.

        After some research, I tried Zentyal. It was a real good alternative for Windows AD.

        Got a decent desktop machine, installed Zentyal, configured as main DC, joined all clients machines from 3 offices, (all nearby, and has shared connection from their main office). Also enabled jabber server+file server. All offices are using this without any issues. AD+Chat+File Server! 🙂
        If am not mistaken, its Ubuntu based. Even though it has quite a lot of features including firewall, I never used it as a firewall.

        1 Reply Last reply Reply Quote 0
        • JaredBuschJ
          JaredBusch @scottalanmiller
          last edited by

          @scottalanmiller so was ClearOS.

          scottalanmillerS 1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @JaredBusch
            last edited by

            @JaredBusch said:

            @scottalanmiller so was ClearOS.

            True

            1 Reply Last reply Reply Quote 0
            • Mike RalstonM
              Mike Ralston
              last edited by

              I'd recommend pfSense. I'm only an intern level tech person, and I find it fairly easy to work with.

              NaraN 1 Reply Last reply Reply Quote 0
              • NaraN
                Nara @Mike Ralston
                last edited by

                @Mike-Ralston said:

                I'd recommend pfSense. I'm only an intern level tech person, and I find it fairly easy to work with.

                For a straight firewall, pfSense is good. If you're looking for something closer to a UTM, Untangle becomes a better option.

                1 Reply Last reply Reply Quote 0
                • scottalanmillerS
                  scottalanmiller
                  last edited by

                  Really only the paid for version of Untangle. I've used Untangle and it is a seriously weak product.

                  NaraN 1 Reply Last reply Reply Quote 0
                  • NaraN
                    Nara @scottalanmiller
                    last edited by

                    @scottalanmiller said:

                    Really only the paid for version of Untangle. I've used Untangle and it is a seriously weak product.

                    Only $50/month and you get content filtering, multi-WAN, IPS, antivirus, application-level control, bandwidth shaping, and more.

                    scottalanmillerS 1 Reply Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller @Nara
                      last edited by

                      @Nara said:

                      @scottalanmiller said:

                      Really only the paid for version of Untangle. I've used Untangle and it is a seriously weak product.

                      Only $50/month and you get content filtering, multi-WAN, IPS, antivirus, application-level control, bandwidth shaping, and more.

                      $50/mo is a ton for an SMB. Considering you have to buy hardware to put the appliance on, that's $600/year. You can get some pretty nice systems for that price.

                      1 Reply Last reply Reply Quote 1
                      • scottalanmillerS
                        scottalanmiller
                        last edited by

                        For that price you could be in a fully supported Meraki, for example, and that's far from a cheap device. It would take less than two years to pay it off assuming you were running your Untangle on free hardware that you already owned.

                        1 Reply Last reply Reply Quote 0
                        • scottalanmillerS
                          scottalanmiller
                          last edited by

                          For only $99, you can have one of these running Vyatta: http://www.amazon.com/EdgeRouter-ERLite-3-512MB-Ethernet-Router/dp/B00CPRVF5K

                          1 Reply Last reply Reply Quote 0
                          • JaredBuschJ
                            JaredBusch
                            last edited by JaredBusch

                            $89 plus shipping from Baltic networks, so depending on your Amazon shipping rates. That may be a better place to buy it.
                            I love the ERL. I have 10 of them in production around various clients.

                            http://www.balticnetworks.com/manufacturers/ubiquiti/edgemax-routers.html

                            scottalanmillerS 1 Reply Last reply Reply Quote 0
                            • scottalanmillerS
                              scottalanmiller @JaredBusch
                              last edited by

                              @JaredBusch said:

                              $89 plus shipping from Baltic networks, so depending on your Amazon shipping rates. That may be a better place to buy it.
                              I love the ERL. I have 10 of them in production around various clients.

                              http://www.balticnetworks.com/manufacturers/ubiquiti/edgemax-routers.html

                              Do the bigger, rack mount models have better throughput? What can the Lite push?

                              JaredBuschJ 1 Reply Last reply Reply Quote 0
                              • JaredBuschJ
                                JaredBusch @scottalanmiller
                                last edited by JaredBusch

                                @scottalanmiller the ERL and ERPOE are 1 billion packets per second (pps). The ER is 2 billions pps and the ER Pro is 2+ billion pps. This is all according to their spec sheets. I have never stressed tested anything. My clients couldn't stress and ERL if they tried.
                                http://www.ubnt.com/edgemax#edge-router-lite

                                1 Reply Last reply Reply Quote 0
                                • scottalanmillerS
                                  scottalanmiller
                                  last edited by

                                  I wish that there was a ERL that was rack mount. That would be way better.

                                  JaredBuschJ 1 Reply Last reply Reply Quote 0
                                  • JaredBuschJ
                                    JaredBusch @scottalanmiller
                                    last edited by

                                    @scottalanmiller said:

                                    I wish that there was a ERL that was rack mount. That would be way better.

                                    You are not the only one. Only one of my install locations has a rack at the moment, but I really wish I had the option.

                                    1 Reply Last reply Reply Quote 0
                                    • RoguePacketR
                                      RoguePacket
                                      last edited by

                                      Seeing the topic of Linux firewalls for a person brand-new to Linux hit Slashdot yesterday (>cough< /. is slacking)—

                                      • http://linux.slashdot.org/story/14/04/05/1622241/ask-slashdot-user-friendly-firewall-for-a-brand-new-linux-user
                                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                                      • scottalanmillerS
                                        scottalanmiller @RoguePacket
                                        last edited by

                                        @RoguePacket said:

                                        Seeing the topic of Linux firewalls for a person brand-new to Linux hit Slashdot yesterday (>cough< /. is slacking)—

                                        • http://linux.slashdot.org/story/14/04/05/1622241/ask-slashdot-user-friendly-firewall-for-a-brand-new-linux-user

                                        Yeah, many more answers here!

                                        1 Reply Last reply Reply Quote 0
                                        • JoyJ
                                          Joy
                                          last edited by

                                          Wow many answers. thanks. but i haven't tried yet 😞

                                          1 Reply Last reply Reply Quote 0
                                          • 1
                                          • 2
                                          • 3
                                          • 1 / 3
                                          • First post
                                            Last post