@nazokiyoubinbou @Viss Exactly

[fritzadalis@infosec.exchange]

@jernej__s @kajer @Viss
OpenBSD? It's just text config files. I have yet to see a gui firewall interface that is easy to manage except for simple configs.

[kajer@infosec.exchange]

@jernej__s @FritzAdalis @Viss

For years I kept trying OPNsense and kept going back to pfSense.

I stopped installing pfSense ~2.5.0 and for sure, I have NEVER touched their installer that requires you to be online to install the FW.

OPNsense got decent and usable by late v23 and fully usable and ready to replace pfSense in v24. They are currently on v25.

I have had some issues with their IPv6 support and some regression in 25.7? And this was all related to CARP though.

I am now using OPNsense as my edge firewalls and core routers in VMs and it's been pretty damn smooth. HA+CARP too.

[victimofsimony@infosec.exchange]

@elfin
@Viss

I did this for all my relatives as their gift this year.

Not really but you have me thinking through fun D.I.Y. ideas involving 3D printing a micro P.C. housing and doing some custom config. :blobcatthinkowo:

[viss@mastodon.social]

@sassdawe @Aprazeth @quad9dns i havent run pihole but from what ive seen its as easy and straightforward as adguard.

both are way way way less hairy and contrived than pfblocker. its unnecessarily complex.

[jernej__s@infosec.exchange]

@kajer @FritzAdalis @Viss Last time I tried OPNsense was 2023-2024, since pfSense 2.6 did not work properly on Hyper-V; the issues I remember from then were:

• extra wide tables that often needed horizontal scrolling
• same tables always defaulted to showing 7 rows (you could change them to show more, but every time you returned to the page, it was back to 7 rows, which took about a third of the screen height, with the rest being blank)
• Firewall Aliases UI was awful, when typing IPs, they turned into pills (or whatever that UI element is called where it becomes uneditable inside a textbox); there was an additional bug where it included space or semicolon inside the pill and then complained that the IP was invalid
• there were two ways of setting up IPSec tunnels, old one that was similar to pfSense and a new one that I couldn't get to work no matter what I tried

[kajer@infosec.exchange]

@jernej__s @FritzAdalis @Viss

the 7 items unless specified differently thing is still a thing, and pretty fucking stupid... Browsers seem to have UNLIMITED vertical scrolling, but we are limiting lists to 7 items why?

I haven't ran in to any weird horizontal behavior.

fucking item list pills. I hate those fucking thing. GIVE ME FREE TEXT GOD DMANIT

yeah, VPN endpoints are tied to interfaces. It's a weird UI thing as compared to pfsense, but you get used to it quickly.

[paul_ipv6@infosec.exchange]

@Viss

just blocking a dozen or two of the big ad insertion folks via DNS really cuts down crap and speed up web browsing...

[wdormann@infosec.exchange]

@Viss
Impressive.

[sleepysticks@hachyderm.io]

@Viss oh I feel that my dude. NextDNS has been an absolute godsend for both me and my family.

[ghostsarespooky@infosec.exchange]

@wdormann @Viss my pihole does about the same percentage, mostly ad networks and trackers. Goes way up if my in-laws are visiting (~35%).

[viss@mastodon.social]

@scottwilson @wdormann im just a few hours in

[viss@mastodon.social]

@ghostsarespooky @wdormann fffffuuuuuu

[meriksson@swecyb.com]

@Viss When in doubt, make naan.

Ancient wisdom.

[theodric@social.linux.pizza]

@Viss indeed

[viss@mastodon.social]

@theodric oh thats a good one

[pettter@social.accum.se]

@Viss can you buy a non-smart TV and then.get back to me about how much 'consumer choice' matters

[cali@infosec.exchange]

@Viss the absolutely irony that you’ll go out and buy an A+ energy efficient fridge but every time you open the door an AI server somewhere consumes $2.73 greeting you

[ppxl@social.tchncs.de]

@Viss the great thing about household appliances is, that there will always be player who want to add as little components as possible to save monies.

That opens up a spectrum, at the least of companies Samsung and ACME where spring powered hammer beats you on Opening the fridge.

[buherator@infosec.place]

@Viss @schrotthaufen We experienced that a lot but I always thought about it as a desperate attempt to signal competence (pbbly as a result of BS phishing simulations) rather distrust. But yeah, that's also a reasonable way to look at it.

[jernej__s@infosec.exchange]

@Viss Just play more ads on them.