Re: alternatives to m0n0
[email protected] Wed, 18 Feb 2015 11:06:01 -0600
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
> Given that, security-wise, the threat model for such devices and the speed > of discovery-release-exploit has developed to the worse lately, it makes > much more sense in my opinion to put the collective effort into a project > which is based on current base packages rather than keeping the old thing > afloat. Especially so, when your time and expertise is limited. Funny that you should bring this up... When Heartbleed came out, pfSense needed a new build. When Shellshocked came out, pfSense and nas4free both needed new builds. m0n0wall did not. Lean systems have less attack vectors. And with OpenSense being 64bit dual core, all of the rather nice Atom platforms are off the table. I am not advocating a vintage firewall. I am advocating a LEAN firewall. Lee