Comment on Anon witnesses excellent security
shalafi@lemmy.world 2 days ago
My last boss got rid of the pfSense routers because “open source is not secure”. I argued that pfSense has been vetted over and over and over again. Nope. “Everyone can see the source code.” That’s the fucking point!
TBF, pfSense isn’t the fastest routing, but at our small company is was more than sufficient.
MehBlah@lemmy.world 2 days ago
For a small to medium sized business pfsense is the only solution that makes sense. The only requirement is that you have a actual sysadmin on staff and not a vendor jockey.
wer2@lemmy.zip 2 days ago
OPNsense is also a viable alternative.
MehBlah@lemmy.world 2 days ago
Sure, I’ve tried it but honestly there wasn’t much difference. I use pfsense because its what I started with. I imagine if you started with opnsense it would be the same thing. I use pfsense+ licensing for all the routers at work and that makes the higher ups happy that its has commercial support if needed.
shalafi@lemmy.world 2 days ago
Tried that for awhile at home, just didn’t seem as robust. Also, you can get Netgate hardware if the company doesn’t want a 10-yo Dell running the edge.
MehBlah@lemmy.world 2 days ago
Bought some of the higher end negate routers for work. 1u rack mount. Five locations all linked with fail over tunnels. I run our filter and monitoring on them as well . Pfblockng works great for general purpose filtering. When you filter porn you really need a lot of ram. The intel boards they have are a little finicky on the type of SFP you can install but other than that they work great.
nova_ad_vitum@lemmy.ca 2 days ago
I’ve had opnsense running for 7 years without a single issue. It might be the most reliable part of my whole setup.