Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firewall OS for pc or raspberry pi?


  • Please log in to reply
10 replies to this topic

#1 wishmakingfairy

wishmakingfairy

  • Members
  • 212 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:02:03 AM

Posted 08 December 2016 - 09:24 AM

Would a firewall os be necessary in any capacity for home users? I have UFW on my ubuntu server and I know the home router has its own firewall and is suppose to be able to help prevent against certain attacks.

 

I have a friend that I rarely get to talk to and he mentioned something about an actual os thats nothing but a firewall so you could turn an old machine or a raspberry pi into one for enhanced security. However I don't know anything much about the physical firewalls. In my mind I feel like they'd be overkill.

 

Does anyone have any names of these that I could load on to either something like an Intel NUC or Raspberry Pi 2 ?

 


Using ubuntu and sharing how to as well as collecting how to scripts for common programs. Feel free to ask or share ^-^


BC AdBot (Login to Remove)

 


#2 DeimosChaos

DeimosChaos

  • BC Advisor
  • 1,418 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United States, Delaware
  • Local time:03:03 AM

Posted 08 December 2016 - 10:47 AM

There are a bunch of different Firewall OSes out there. 

 

Pfsense is as big one.

 

I mentioned Untangle in your other thread.

 

Sophos has a free UTM.

 

Here is a list of 6 different ones.

 

I wouldn't run a firewall off a Raspberry pi. Mostly for this one reason. It doesn't have two Ethernet ports. With a firewall you would want it to sit between your modem and your router (or switch). Without having 2 fast Ethernet ports you could potentially bog your network down a good amount (I wouldn't do it with a usb Ethernet). For the hardware I would use a cheap workstation. Doesn't need much just the ability to add a couple PCI Ethernet cards. You can get refurbished workstations online for like 100 bucks, or cheaper, and those would probably work out just fine.

 

*Edit

 

Forgot to answer your first question.

 

Necessary... probably not. It does add that extra layer and these Firewall OSes have way more abilities and features then your typical router. I am actually thinking about buying one of the Untangle hardware firewalls (cheapest one is only around 400 or so). Really it comes down to you and if you think you want to add that layer of protection to your home network.


Edited by DeimosChaos, 08 December 2016 - 10:49 AM.

OS - Ubuntu 14.04/16.04 & Windows 10
Custom Desktop PC / Lenovo Y580 / Sager NP8258 / Dell XPS 13 (9350)
_____________________________________________________
Bachelor of Science in Computing Security from Drexel University
Security +


#3 wishmakingfairy

wishmakingfairy
  • Topic Starter

  • Members
  • 212 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:02:03 AM

Posted 08 December 2016 - 11:07 AM

Thanks, I don't know why but either i kept searching the wrong keywords or just didn't look hard enough. I heard of most of those but I think my morning fog just kept me drawing a blank.

 

The smoothwall looks really nice and for my needs, simplified.


Edited by wishmakingfairy, 08 December 2016 - 11:15 AM.

Using ubuntu and sharing how to as well as collecting how to scripts for common programs. Feel free to ask or share ^-^


#4 DeimosChaos

DeimosChaos

  • BC Advisor
  • 1,418 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United States, Delaware
  • Local time:03:03 AM

Posted 08 December 2016 - 11:17 AM

Haha all good. Gotta get that morning coffee, if you drink coffee.

 

Smoothwall is one I'm not familiar with. I'll have to check it out as well.


OS - Ubuntu 14.04/16.04 & Windows 10
Custom Desktop PC / Lenovo Y580 / Sager NP8258 / Dell XPS 13 (9350)
_____________________________________________________
Bachelor of Science in Computing Security from Drexel University
Security +


#5 wishmakingfairy

wishmakingfairy
  • Topic Starter

  • Members
  • 212 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:02:03 AM

Posted 08 December 2016 - 11:24 AM

My friend just got back to me, he mentioned Zero shell.


Using ubuntu and sharing how to as well as collecting how to scripts for common programs. Feel free to ask or share ^-^


#6 DeimosChaos

DeimosChaos

  • BC Advisor
  • 1,418 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United States, Delaware
  • Local time:03:03 AM

Posted 08 December 2016 - 01:44 PM

Thinking about this again. You could run it off a pi or a VM if you did proxying and all that jazz. Make the network think its in between the modem and router even if it is physically not.


OS - Ubuntu 14.04/16.04 & Windows 10
Custom Desktop PC / Lenovo Y580 / Sager NP8258 / Dell XPS 13 (9350)
_____________________________________________________
Bachelor of Science in Computing Security from Drexel University
Security +


#7 synaptic

synaptic

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:08:03 AM

Posted 09 December 2016 - 12:11 AM

@wishmakingfairy

Good post and a good idea for a project .

I think it is well worth doing and very satisfying to accomplish .

 

As mentioned earlier , the Raspberry Pi is a little lacking on the hardware side but the Banana Pi is a better fit .

They make a variant called BPI-R1 which is designed for just this kind of thing ( and won't break the bank ) .

 

I would recommend installing pfsense or dd-wrt as the "firewall OS " of choice .



#8 DodoIso

DodoIso

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:03:03 AM

Posted 09 December 2016 - 04:25 AM

Thanks for the suggestions, guys!  I thought of doing this myself.  I bought myself a nice Single Board Computer (with two Ethernet ports) just for that purpose.  Now, I only need more time to develop the (hardcoded) firmware.  Yet another layer...

 

In my mind I feel like they'd be overkill.

 

 

Never underestimate criminals!  It's not because you don't see them that they aren't there to hurt you... Just read the Bleeping Computer headlines for a taste of this small tip of the Iceberg.



#9 HolyCowz

HolyCowz

  • Members
  • 168 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:GMT
  • Local time:08:03 AM

Posted 09 December 2016 - 04:44 AM

Pf-sense is a nice firewall and there are many you tube videos to help you set it up i find a good video makes it so much easier.

 

@synaptic I thought DD-wrt was router firmware with a firewall built in?

If DD-wrt do a stand alone firewall can you provide me a link please I had a look couldn't find the stand alone firewall.

Thanks



#10 synaptic

synaptic

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:08:03 AM

Posted 10 December 2016 - 05:39 AM

@HolyCowz

Thank you , I can see that what I wrote could be confusing .

 

You are right of course , AFAIK there is no stand-alone firewall from dd-wrt.

But thanks for pointing it out ; that distinction should now be clear to anyone reading this thread :)



#11 HolyCowz

HolyCowz

  • Members
  • 168 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:GMT
  • Local time:08:03 AM

Posted 11 December 2016 - 03:44 PM

@synaptic

Ok thank you for the reply that's a shame thought i'd missed it wouldn't be the first time I overlooked something that was right in front of me.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users