@nazokiyoubinbou @Viss Exactly

[0xtero@ohai.social]

@Viss just call it ”winter change freeze” and hoist the out of office flag

[0xtero@ohai.social]

@Viss don’t forget to push to prod before you go though!

[jernej__s@infosec.exchange]

@FritzAdalis @kajer @Viss Have they improved the UI any yet? The last time I tried it, it was so much worse than pfSense…

[rossmadness@infosec.exchange]

@Viss Time to send screenshots of every page. Bring that "paying your water bill in pennies" energy.

[h2onolan@infosec.exchange]

@Viss "i deleted your email because you're the security guy and might phish me"

#facepalmconcussion

[victimofsimony@infosec.exchange]

@Viss

I'd just attach each page as an 1100x850 monochrome .GIF named with the page numbers instead.

If they complain, put the images in a .ZIP and attach that instead.

[viss@mastodon.social]

@h2onolan this energy right here

[h2onolan@infosec.exchange]

@cR0w xlsb

[viss@mastodon.social]

@VictimOfSimony meh. i just said 'look if you dont trust me theres no reason to bother'

[aprazeth@mstdn.social]

@h2onolan @cR0w
.pptm

[kwayk42@sechtor.social]

@cR0w @Viss

.webp

[elfin@mstdn.social]

@Viss @VictimOfSimony That's how I deal with it.

We're SysAdmins (among other things). They sort of Have to trust me (us).

But here's the thing: I've noticed that those people think Very Highly of themselves (they're important enough to bother to hack ... lol, no).

And also, I have time, motivation, or interest in hacking them (lol, no).

[viss@mastodon.social]

@elfin @VictimOfSimony this guy works at google and is on one of their security teams, so its extra tiresome

[elfin@mstdn.social]

@Viss @VictimOfSimony Oh FFS. Seriously?

Tell him to make a VM, put his mail reader in that, and open it there if he's all Google resource toity, and quit whining.

[sassdawe@infosec.exchange]

@Aprazeth +1 after @Viss converted me.

I have @quad9dns set as a resolver on #adguard, and I am pretty happy with the results.

[fritzadalis@infosec.exchange]

@jernej__s @kajer @Viss
OpenBSD? It's just text config files. I have yet to see a gui firewall interface that is easy to manage except for simple configs.

[kajer@infosec.exchange]

@jernej__s @FritzAdalis @Viss

For years I kept trying OPNsense and kept going back to pfSense.

I stopped installing pfSense ~2.5.0 and for sure, I have NEVER touched their installer that requires you to be online to install the FW.

OPNsense got decent and usable by late v23 and fully usable and ready to replace pfSense in v24. They are currently on v25.

I have had some issues with their IPv6 support and some regression in 25.7? And this was all related to CARP though.

I am now using OPNsense as my edge firewalls and core routers in VMs and it's been pretty damn smooth. HA+CARP too.

[victimofsimony@infosec.exchange]

@elfin
@Viss

I did this for all my relatives as their gift this year.

Not really but you have me thinking through fun D.I.Y. ideas involving 3D printing a micro P.C. housing and doing some custom config. :blobcatthinkowo:

[viss@mastodon.social]

@sassdawe @Aprazeth @quad9dns i havent run pihole but from what ive seen its as easy and straightforward as adguard.

both are way way way less hairy and contrived than pfblocker. its unnecessarily complex.

[jernej__s@infosec.exchange]

@kajer @FritzAdalis @Viss Last time I tried OPNsense was 2023-2024, since pfSense 2.6 did not work properly on Hyper-V; the issues I remember from then were:

• extra wide tables that often needed horizontal scrolling
• same tables always defaulted to showing 7 rows (you could change them to show more, but every time you returned to the page, it was back to 7 rows, which took about a third of the screen height, with the rest being blank)
• Firewall Aliases UI was awful, when typing IPs, they turned into pills (or whatever that UI element is called where it becomes uneditable inside a textbox); there was an additional bug where it included space or semicolon inside the pill and then complained that the IP was invalid
• there were two ways of setting up IPSec tunnels, old one that was similar to pfSense and a new one that I couldn't get to work no matter what I tried