alternatives to m0n0

Thomas Sprinzing <[email protected]> Mon, 16 Feb 2015 18:01:07 +0100
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Dear all,

maybe it=92s worth while to open another thread for those of you feeling =
stranded. Fear not, thou shalt not walk alone. Since i have replaced 2 =
m0n0 on wrap this summer, let me just put my 2 cents worth of ideas =
here:

- Although the boxen were running fine all the way, i decided it=92s not =
the question if, but when hardware failure will strike. Hardware that=92s =
been running for over ten years now has earned it=92s money. Time to =
retire that old thing, eh?

- Wall warts - you can only get as throwaway. Buy them per weight=85

- switched to pfsense on apu. Running fine so far. Redneck - Proof as =
well, Handles quite some abuse at my friend=92s. (power loss, reset by =
yanking power cable, borked dsl modems etc.)
- pfsense vs. immediate bugfixes: well, heartbleed was fixed quickly, =
other stuff took a while, but all in all i=92m happy.
- pfsense forums: i was shocked by the attitude and the tone of some of =
the core wizards on the forum.
- pfsense business vs. community:  truly versus. see before. Pfsense =
seems to be stuck in a rut there, the opnsense fork was already on the =
horizon last summer.
- Let me make an uneducated guess: the need for developer hangouts will =
be limited with this audience. Thus, pfsense gold support contracts will =
most probably not skyrocket now.

- i have one of my old wraps sitting on my shelf, iirc i had it running =
pfsense after i set the replacements up. Although it will not run the =
resource hogs like snort or such, basic m0n0-tasks will work. You=92ll =
find your way around pretty quickly.

- beware of the boot loader: from freenas i had to learn it the hard =
way: old junk and new-style bootloaders won=92t play nice.  Might be an =
issue with pfsense as well as opnsense. Another reason to give your =
friendly hardware supplier some business.

- those of you catering for businesses: Maybe it=92s the best reason to =
talk to your customers. Talk about business continuity and such=85. I=92d =
say for the moment, you won=92t do wrong going pfsense, whether you buy =
into their weird gold sponsor thing or not.=20


Will try opnsense for the home setup soon, time allowing. Surely after =
closure of this list, though.

all the best for you out there, it=92s been a pleasure

Thomas


Am 16.02.2015 um 16:41 schrieb Patrick Barber <[email protected]>:

> Such a shame, whilst opnsense looks very good, the recommended =
hardware
> requirements of a little high, I have happily run m0n0 on a soekris =
net4801
> since the first beta releases, and to have to move to a box that has a =
dual
> core CPU, and 1gb of RAM I find hard to swallow.