Hacker News Reader

Comment by click170 | Hacker News Reader

Every time I say this I feel like a shill because I worked for them briefly, but Sophos has a Home version of their UTM firewall (0). It has pros and cons, but overall I think it's pretty good (even after working there).

Some other options include Sonicwall and pfsense, and I encourage others to post their suggestions as well. I haven't used SonicWall, though I have used pfsense strictly as a firewall.

(0) http://www.sophos.com/en-us/products/free-tools/sophos-utm-h...

View on HN

Any hardware solution recommendations - or things that will run on a RPi/router?

I don't like the idea of having to keep a desktop/laptop computer on 24/7.

I've been looking at this AMD-based barebones machine with dual LAN: newegg.com/Product/Product.aspx?Item=N82E16856107110

Reviews suggest pfsense runs well, and with 4GB RAM and a decent SSD one could probably run snort and squid as well. Probably about $330 all assembled.

https://www.pfsense.org/hardware/#pfsense-store

Yeah, I saw that. Not exactly consumer prices are they?

Reading the forums there are some dual LAN Atom based mini PCs that seem OK.

Edit: Also http://store.netgate.com/Desktop-Systems-C83.aspx has some preconfigured options at under $300.

Those are the same things.

If you do not want to financially support pfSense, you can buy hardware from Netgate directly, starting from $299. Even cheaper as a kit or with older hardware, but you decide for yourself whether it will be adequate for you. I'm planning on buying an assembled APU from Netgate for myself; right now I'm using m0n0wall on a separate P3 PC (Celeron 1000), modded for silence. Probably will try out pfSense beforehand, on a separate CF card I just ordered.

The Netgate APU2/APU4 devices don't appear to be available directly from pfsense. They do say money from them goes to pfsense though (and they advertise them on the pfsense site)

OpenWRT on a Buffalo WZR-HP-AG300H is a another very nice and cheap solution.

There are some nice form factor cases out there now-a-days, and I would like to explore using those to make a firewall I could offer to friends and family to protect them too, but I'm just using an old desktop right now.

Curious as to why you don't want to keep a desktop on 24/7?

Desktops use a fair amount of power and almost always have some amount of noise associated with them.

Throw pfsense on an alix box. www.pcengines.ch/apu.htm

Reply on news.ycombinator.com