@nazokiyoubinbou @Viss Exactly

[aprazeth@mstdn.social]

@Viss
Honestly, it ain't bad. I use it integrated with HA and it's pretty spiffy.

Plus, you can always dump more blocklists.

That said, I am pondering having a go with PiHole. Then again, that might be a while knowing myself

[viss@mastodon.social]

@Aprazeth adghard home comes stock on gl.inet routers. its so much nicer and easier to deal with than pfblocker

[aprazeth@mstdn.social]

@Viss
Woaaa in that case, happy days

B'bye ads, cookiebanners and what not. And if somehow accidentally you drop in a few blocks to some chatbots... Well even better

[0xtero@ohai.social]

@Viss just call it ”winter change freeze” and hoist the out of office flag

[0xtero@ohai.social]

@Viss don’t forget to push to prod before you go though!

[jernej__s@infosec.exchange]

@FritzAdalis @kajer @Viss Have they improved the UI any yet? The last time I tried it, it was so much worse than pfSense…

[rossmadness@infosec.exchange]

@Viss Time to send screenshots of every page. Bring that "paying your water bill in pennies" energy.

[h2onolan@infosec.exchange]

@Viss "i deleted your email because you're the security guy and might phish me"

#facepalmconcussion

[victimofsimony@infosec.exchange]

@Viss

I'd just attach each page as an 1100x850 monochrome .GIF named with the page numbers instead.

If they complain, put the images in a .ZIP and attach that instead.

[viss@mastodon.social]

@h2onolan this energy right here

[h2onolan@infosec.exchange]

@cR0w xlsb

[viss@mastodon.social]

@VictimOfSimony meh. i just said 'look if you dont trust me theres no reason to bother'

[aprazeth@mstdn.social]

@h2onolan @cR0w
.pptm

[kwayk42@sechtor.social]

@cR0w @Viss

.webp

[elfin@mstdn.social]

@Viss @VictimOfSimony That's how I deal with it.

We're SysAdmins (among other things). They sort of Have to trust me (us).

But here's the thing: I've noticed that those people think Very Highly of themselves (they're important enough to bother to hack ... lol, no).

And also, I have time, motivation, or interest in hacking them (lol, no).

[viss@mastodon.social]

@elfin @VictimOfSimony this guy works at google and is on one of their security teams, so its extra tiresome

[elfin@mstdn.social]

@Viss @VictimOfSimony Oh FFS. Seriously?

Tell him to make a VM, put his mail reader in that, and open it there if he's all Google resource toity, and quit whining.

[sassdawe@infosec.exchange]

@Aprazeth +1 after @Viss converted me.

I have @quad9dns set as a resolver on #adguard, and I am pretty happy with the results.

[fritzadalis@infosec.exchange]

@jernej__s @kajer @Viss
OpenBSD? It's just text config files. I have yet to see a gui firewall interface that is easy to manage except for simple configs.

[kajer@infosec.exchange]

@jernej__s @FritzAdalis @Viss

For years I kept trying OPNsense and kept going back to pfSense.

I stopped installing pfSense ~2.5.0 and for sure, I have NEVER touched their installer that requires you to be online to install the FW.

OPNsense got decent and usable by late v23 and fully usable and ready to replace pfSense in v24. They are currently on v25.

I have had some issues with their IPv6 support and some regression in 25.7? And this was all related to CARP though.

I am now using OPNsense as my edge firewalls and core routers in VMs and it's been pretty damn smooth. HA+CARP too.