Re: alternatives to m0n0

[email protected] Wed, 18 Feb 2015 11:06:01 -0600
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
> Given that, security-wise, the threat model for such devices and the speed
> of discovery-release-exploit has developed to the worse lately, it makes
> much more sense in my opinion to put the collective effort into a project
> which is based on current base packages rather than keeping the old thing
> afloat. Especially so, when your time and expertise is limited.

Funny that you should bring this up...  When Heartbleed came out, pfSense
needed a new build.  When Shellshocked came out, pfSense and nas4free both
needed new builds.  m0n0wall did not.  Lean systems have less attack
vectors.  And with OpenSense being 64bit dual core, all of the rather nice
Atom platforms are off the table.

I am not advocating a vintage firewall.  I am advocating a LEAN firewall.

Lee