@nazokiyoubinbou @Viss Exactly

[viss@mastodon.social]

@VictimOfSimony meh. i just said 'look if you dont trust me theres no reason to bother'

[aprazeth@mstdn.social]

@h2onolan @cR0w
.pptm

[kwayk42@sechtor.social]

@cR0w @Viss

.webp

[elfin@mstdn.social]

@Viss @VictimOfSimony That's how I deal with it.

We're SysAdmins (among other things). They sort of Have to trust me (us).

But here's the thing: I've noticed that those people think Very Highly of themselves (they're important enough to bother to hack ... lol, no).

And also, I have time, motivation, or interest in hacking them (lol, no).

[viss@mastodon.social]

@elfin @VictimOfSimony this guy works at google and is on one of their security teams, so its extra tiresome

[elfin@mstdn.social]

@Viss @VictimOfSimony Oh FFS. Seriously?

Tell him to make a VM, put his mail reader in that, and open it there if he's all Google resource toity, and quit whining.

[sassdawe@infosec.exchange]

@Aprazeth +1 after @Viss converted me.

I have @quad9dns set as a resolver on #adguard, and I am pretty happy with the results.

[fritzadalis@infosec.exchange]

@jernej__s @kajer @Viss
OpenBSD? It's just text config files. I have yet to see a gui firewall interface that is easy to manage except for simple configs.

[kajer@infosec.exchange]

@jernej__s @FritzAdalis @Viss

For years I kept trying OPNsense and kept going back to pfSense.

I stopped installing pfSense ~2.5.0 and for sure, I have NEVER touched their installer that requires you to be online to install the FW.

OPNsense got decent and usable by late v23 and fully usable and ready to replace pfSense in v24. They are currently on v25.

I have had some issues with their IPv6 support and some regression in 25.7? And this was all related to CARP though.

I am now using OPNsense as my edge firewalls and core routers in VMs and it's been pretty damn smooth. HA+CARP too.

[victimofsimony@infosec.exchange]

@elfin
@Viss

I did this for all my relatives as their gift this year.

Not really but you have me thinking through fun D.I.Y. ideas involving 3D printing a micro P.C. housing and doing some custom config. :blobcatthinkowo:

[viss@mastodon.social]

@sassdawe @Aprazeth @quad9dns i havent run pihole but from what ive seen its as easy and straightforward as adguard.

both are way way way less hairy and contrived than pfblocker. its unnecessarily complex.

[jernej__s@infosec.exchange]

@kajer @FritzAdalis @Viss Last time I tried OPNsense was 2023-2024, since pfSense 2.6 did not work properly on Hyper-V; the issues I remember from then were:

• extra wide tables that often needed horizontal scrolling
• same tables always defaulted to showing 7 rows (you could change them to show more, but every time you returned to the page, it was back to 7 rows, which took about a third of the screen height, with the rest being blank)
• Firewall Aliases UI was awful, when typing IPs, they turned into pills (or whatever that UI element is called where it becomes uneditable inside a textbox); there was an additional bug where it included space or semicolon inside the pill and then complained that the IP was invalid
• there were two ways of setting up IPSec tunnels, old one that was similar to pfSense and a new one that I couldn't get to work no matter what I tried

[kajer@infosec.exchange]

@jernej__s @FritzAdalis @Viss

the 7 items unless specified differently thing is still a thing, and pretty fucking stupid... Browsers seem to have UNLIMITED vertical scrolling, but we are limiting lists to 7 items why?

I haven't ran in to any weird horizontal behavior.

fucking item list pills. I hate those fucking thing. GIVE ME FREE TEXT GOD DMANIT

yeah, VPN endpoints are tied to interfaces. It's a weird UI thing as compared to pfsense, but you get used to it quickly.

[paul_ipv6@infosec.exchange]

@Viss

just blocking a dozen or two of the big ad insertion folks via DNS really cuts down crap and speed up web browsing...

[wdormann@infosec.exchange]

@Viss
Impressive.

[sleepysticks@hachyderm.io]

@Viss oh I feel that my dude. NextDNS has been an absolute godsend for both me and my family.

[ghostsarespooky@infosec.exchange]

@wdormann @Viss my pihole does about the same percentage, mostly ad networks and trackers. Goes way up if my in-laws are visiting (~35%).

[viss@mastodon.social]

@scottwilson @wdormann im just a few hours in

[viss@mastodon.social]

@ghostsarespooky @wdormann fffffuuuuuu

[meriksson@swecyb.com]

@Viss When in doubt, make naan.

Ancient wisdom.