Re: "Debian as My home firewall/router" on the debian-user mailing list
Administrator <admin-JJaFKVBkT/[email protected]>
| Newsgroups | gmane.comp.security.ipcop.user |
|---|---|
| Organization | different perspectives |
| Message-ID | <1658183.yyWTCBEodm@epping> |
On Saturday 27 Feb 2016 11:20:49 David Christensen wrote: > ipcop-user: > > There is a thread "Debian as My home firewall/router" on the debian-user > mailing list. One poster mentioned IPCop as a possible solution, but > another has claimed that there are significant flaws in IPCop. I used > IPCop for many years, and found it to be very useful. I am curious if > the criticism is accurate. > > > It would be helpful if a person knowledgeable in the IPCop project and > IPCop internals joined the discussion: > > https://lists.debian.org/debian-user/ > > https://lists.debian.org/debian-user/2016/02/msg00963.html > > > David My view on this is different as I'm knowledgeable but not an expert. I have 4 choices: use a retail gateway / firewall device; use IPCop / pfsense or something similar; use a professional gateway / firewall device; hand-roll my own on top of a trusted distribution. Retail devices are repeatedly reported for security flaws which remain un- patched for months. That's a fail. Professional devices are better, but expensive and complex to set up securely. Hand-rolled gateway / firewall on top of a generic distribution is even more complex to set up securely and maintain. I don't have the time for either. Complexity is a security risk, as is the need for perpetual learning to keep up-to-date on the latest threats and best practice. That leaves IPCop / pfsense ... they strike a good balance between security and complexity, with the cost being acceptable :-) YMMV David ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 _______________________________________________ IPCop-user mailing list [email protected] Manage your subscription or unsubscribe https://lists.sourceforge.net/lists/listinfo/ipcop-user