Slashdot Mirror

Well, I used m0n0wall in my work. So when it folded, I needed a replacement, and forked http://www.smallwall.org/ which I maintain with a lot of help. :) In other words, I also make some money on it with clients.

So the Router firmware that everyone here coos about actually uses a sucky firewall? Netfilter != pf. Typical F/OSS Fail.

So pick another one like http://www.smallwall.org/ or http://www.pfsense.org/ or whatever. The nice thing about FOSS is choice.

But that's like saying you really only have one choice: Both smallwall and pfsense are simply Derivatives of the now-abandoned (like so many other F/OSS Projects), M0n0wall.

And since smallwall's main focus is "Small and Lean", rather than "Robust and Complete", I would think that using it wouldn't be a step "up" in the world of firewall-dom.

As far as pfsense goes, I can't figure out where it lives, since it is considered a Derivative of m0n0wall, but yet it lists pf as a dependancy. So??? Heck, even iOS runs pf (which I actually found amazing). What is OpenWRT's problem?

So the Router firmware that everyone here coos about actually uses a sucky firewall? Netfilter != pf. Typical F/OSS Fail.

So pick another one like http://www.smallwall.org/ or http://www.pfsense.org/ or whatever. The nice thing about FOSS is choice.

But that's like saying you really only have one choice: Both smallwall and pfsense are simply Derivatives of the now-abandoned (like so many other F/OSS Projects), M0n0wall.

And since smallwall's main focus is "Small and Lean", rather than "Robust and Complete", I would think that using it wouldn't be a step "up" in the world of firewall-dom.

As far as pfsense goes, I can't figure out where it lives, since it is considered a Derivative of m0n0wall, but yet it lists pf as a dependancy. So??? Heck, even iOS runs pf (which I actually found amazing). What is OpenWRT's problem?

So the Router firmware that everyone here coos about actually uses a sucky firewall?
Netfilter != pf.
Typical F/OSS Fail.

So pick another one like http://www.smallwall.org/ or http://www.pfsense.org/ or whatever. The nice thing about FOSS is choice.

I love that page. A good coverage of what is considered secure. In SmallWall, http://www.smallwall.org/ the continuation of m0n0wall, the IPsec configuration page actually has a link to that Cisco page, along with warnings about what is no longer secure.

Note, however, that they also consider DH-2048 acceptable. I believe the general consensus is that it will be secure until about 2020.

Particularly with the FCC racing to lock down router firmware,

Which is a damn good reason to separate the router and the WiFi. The FCC can not do shit about http://www.smallwall.org/ or http://www.pfsense.org/ or any other router that works better than most commercial offerings on old cheap retired desktops.

You mean like http://www.smallwall.org/ on any one of a half dozen other m0n0wall derived firewalls?
Or DD-WRT? Of course since many of these people could not even be bothered to change the password, I think a firewall is pretty fucking unlikely.

None of these are as small as *WRT distros and they still to this day only run on x86 and x64, but you get OpenBSD's packet filter (claimed by most to be superior to Linux's) bolted onto FreeBSD (for better hardware support?) and a BSD license if that matters to you.

Also, good luck getting a *wrt to give gigabit sustained transfers. :) SmallWall and m0n0wall on modern hardware can give 900meg sustained transfers all day, and can do some hefty encryption on the side if needed for IPSEC.

As to the projects that owe allegiance to m0n0wal, and the people that learned there... This is a quick peek at some of those people... http://www.smallwall.org/histo...

User Handbook (single page) - Comming Soon!

Alright then, so there's no updated docs. I'll just click the handy link to The m0n0wall Documentation Project - Chris Buechler. Oh wait, it's a 404. Nice going guys.