N00b review, home user. Background is owning a Linux-based VDSL2 modem/router/wifi box which is no longer receiving updates.
My goal was to dumb/split down that thingy into two separate entities, namely a dumb DSL modem for IPfire RED side (aka public interwebs), and a simple ethernet+wifi switch which talks to IPfire on the GREEN side, what with ipfire keeping pub and private separate.
Lo and behold, ipfire pretty much worked out of the box, and compared to the firewall in my older combo box, the interface felt friggin' user *friendly*!
Samba add-on made it easy enough to turn ipfire into a poor man's home NAS. Enabled SSH server, went rogue in the CLI and now the damn thing is a full bitcoin node as well.
Long story short, this is what I tried to do with barebones Debian but did not know how... so much stuff in this distro which just manages to demystify swamp monster... er, interwebs... a little, for a n00b.
I love that this is an independent distro with some specific goals, with carefully chosen options (PAKfire) afaict. Me likee!
This is a very nice system for building your own firewall. I got a new ISP and they shipped an awful locked-down Amazon unit that needed a bluetooth-enabled smartphone to talk to it so I wanted something else. Commercial stuff is expensive, and you want to be sure to get security updates. I tried OpnSense but the lack of decent wireless support on BSD was no good for me, I don't want to have a separate access point.
This is easy to install and configure, I used an old SFF office computer I rescued from the trash, with a second NIC installed. A decent WiFi dongle allows it to run as an AP as well, but make sure the device you choose supports AP mode. The forum and Wiki are great, and the developers respond promptly to questions. IPFire uses few system resources and has some excellent features such as the Intrusion Prevention system. There are also lots of logging options to see what's happening. My system has been running for over a year now, only rebooted for system updates.
I am a former Freesco user and when it became hard to source hardware, I switched. I tried pfSense, and whilst I was impressed with what you can do, it really doesn't play nice with some hardware. Based on FreeBSD, it is less in tune with some consumer grade stuff. IpFire was next and being a Linux based firewall, it handles consumer stuff much better, yielding more reliability in my situation.
Overall config is easy, forum support is good, helpful, feature set from a security perspective very impressive. I managed to hook up my UPS easily, configure RED to the right VLAN, and get SSH setup securely. Recently I've moved the hardware to a simple appliance, and that combo works so well, I have literally all the services up and running. I like the ease of setting your own DNS servers, avoiding those the ISP provides and switching to secure DNS. OpenVPN is easy to set up and get going, and the DynamicDNS feature works well, it automatically maintains the assigned IP for you, allowing you easily connect from the outside.
Reporting is good, lots of info. I handle around 30-50TB every day, and it is rock solid. I have it reboot occasionally to clear the cache, but it's not really needed. Updates are frequent and useful, and have been for years. I've made several donations over the years to support the effort.
Probably it's biggest weakness is something pfSense and OPNSense can do, the routing part. There is some VLAN support, but if your ISP uses multiple RED's (or external networks in non IPFire speak), IpFire can't handle it, there is also not much in IPv6 support. Supposedly there is rewrite on the way supporting IPv6, but this is not a wealthy community, so progress is slow.
So for most SOHO scenarios, IpFire is great, but it might not be enough for your needs. It is true open source, well maintained by a group that knows what they are doing. The other Linux based offerings seem more the fremium model, even though they blab open source, their power has to be unlocked through payments. I would never go that route, so if IpFire can't do it for me, I'd go to pfSense, or OPNSense. So in my mind, IpFire is the best Linux based open source firewall distro out there. And that's quite something.
I use Ipfire for a while now. I tried many firewall but i always prefer ipfire. The best feature i love is geolocation block. So i can block all incoming trafics from the country i blocked.
The development team members are focused on security, and have made great strides in the recent past.
My only concern is the long term goal of incorporating systemd, which will be a show- stopper for me. At that point, I'll have to roll out another solution, such as ShoreWall, on a systemd- free distribution, such as Devuan.
For those who are unconcerned about the systemd intent, IPFire is a great long- term solution, particularly if one stays current with updates.
Excelent documentation, attention to detail and user problems. Highly recommended!
Flashed the ARM version of IPFire 2.25 on a tiny NanoPi R1 (1Gb) which I replaced the Open-WRT that it came on the eMMC. The WAN is 1Gb and the LAN 10/100Mb which is more then enough for my home internet that is connected to a 1Gb 8 port switch. I decided not to use the builtin WiFi and purchased a TP-Link Omada AC1350 AP (PoE) for full coverage of my single floor 3000 Sqft house (AP centrally mounted). Flashing was almost easy. Really like all the functionality this has. Has a very noticble speed increase over my old Netgear router. I imagine I will be limited to installing too many add-on packages due to the NanoPi is using a ARM cpu.
* Security focused with regular updates
* Runs on low-end hardware
* Completely managed through the GUI. Almost no command-line (ssh) usage required after initial install.
* Useful collection of add-ons
I have been using this for over a year and am quite happy with it.
N00b review, home user. Background is owning a Linux-based VDSL2 modem/router/wifi box which is no longer receiving updates.
My goal was to dumb/split down that thingy into two separate entities, namely a dumb DSL modem for IPfire RED side (aka public interwebs), and a simple ethernet+wifi switch which talks to IPfire on the GREEN side, what with ipfire keeping pub and private separate.
Lo and behold, ipfire pretty much worked out of the box, and compared to the firewall in my older combo box, the interface felt friggin' user *friendly*!
Samba add-on made it easy enough to turn ipfire into a poor man's home NAS. Enabled SSH server, went rogue in the CLI and now the damn thing is a full bitcoin node as well.
Long story short, this is what I tried to do with barebones Debian but did not know how... so much stuff in this distro which just manages to demystify swamp monster... er, interwebs... a little, for a n00b.
I love that this is an independent distro with some specific goals, with carefully chosen options (PAKfire) afaict. Me likee!
This is a very nice system for building your own firewall. I got a new ISP and they shipped an awful locked-down Amazon unit that needed a bluetooth-enabled smartphone to talk to it so I wanted something else. Commercial stuff is expensive, and you want to be sure to get security updates. I tried OpnSense but the lack of decent wireless support on BSD was no good for me, I don't want to have a separate access point.
This is easy to install and configure, I used an old SFF office computer I rescued from the trash, with a second NIC installed. A decent WiFi dongle allows it to run as an AP as well, but make sure the device you choose supports AP mode. The forum and Wiki are great, and the developers respond promptly to questions. IPFire uses few system resources and has some excellent features such as the Intrusion Prevention system. There are also lots of logging options to see what's happening. My system has been running for over a year now, only rebooted for system updates.
I am a former Freesco user and when it became hard to source hardware, I switched. I tried pfSense, and whilst I was impressed with what you can do, it really doesn't play nice with some hardware. Based on FreeBSD, it is less in tune with some consumer grade stuff. IpFire was next and being a Linux based firewall, it handles consumer stuff much better, yielding more reliability in my situation.
Overall config is easy, forum support is good, helpful, feature set from a security perspective very impressive. I managed to hook up my UPS easily, configure RED to the right VLAN, and get SSH setup securely. Recently I've moved the hardware to a simple appliance, and that combo works so well, I have literally all the services up and running. I like the ease of setting your own DNS servers, avoiding those the ISP provides and switching to secure DNS. OpenVPN is easy to set up and get going, and the DynamicDNS feature works well, it automatically maintains the assigned IP for you, allowing you easily connect from the outside.
Reporting is good, lots of info. I handle around 30-50TB every day, and it is rock solid. I have it reboot occasionally to clear the cache, but it's not really needed. Updates are frequent and useful, and have been for years. I've made several donations over the years to support the effort.
Probably it's biggest weakness is something pfSense and OPNSense can do, the routing part. There is some VLAN support, but if your ISP uses multiple RED's (or external networks in non IPFire speak), IpFire can't handle it, there is also not much in IPv6 support. Supposedly there is rewrite on the way supporting IPv6, but this is not a wealthy community, so progress is slow.
So for most SOHO scenarios, IpFire is great, but it might not be enough for your needs. It is true open source, well maintained by a group that knows what they are doing. The other Linux based offerings seem more the fremium model, even though they blab open source, their power has to be unlocked through payments. I would never go that route, so if IpFire can't do it for me, I'd go to pfSense, or OPNSense. So in my mind, IpFire is the best Linux based open source firewall distro out there. And that's quite something.
I use Ipfire for a while now. I tried many firewall but i always prefer ipfire. The best feature i love is geolocation block. So i can block all incoming trafics from the country i blocked.
The development team members are focused on security, and have made great strides in the recent past.
My only concern is the long term goal of incorporating systemd, which will be a show- stopper for me. At that point, I'll have to roll out another solution, such as ShoreWall, on a systemd- free distribution, such as Devuan.
For those who are unconcerned about the systemd intent, IPFire is a great long- term solution, particularly if one stays current with updates.
Excelent documentation, attention to detail and user problems. Highly recommended!
* Security focused with regular updates
* Runs on low-end hardware
* Completely managed through the GUI. Almost no command-line (ssh) usage required after initial install.
* Useful collection of add-ons
I have been using this for over a year and am quite happy with it.
Flashed the ARM version of IPFire 2.25 on a tiny NanoPi R1 (1Gb) which I replaced the Open-WRT that it came on the eMMC. The WAN is 1Gb and the LAN 10/100Mb which is more then enough for my home internet that is connected to a 1Gb 8 port switch. I decided not to use the builtin WiFi and purchased a TP-Link Omada AC1350 AP (PoE) for full coverage of my single floor 3000 Sqft house (AP centrally mounted). Flashing was almost easy. Really like all the functionality this has. Has a very noticble speed increase over my old Netgear router. I imagine I will be limited to installing too many add-on packages due to the NanoPi is using a ARM cpu.
No warning wipes out my whole hard drive on installation. This is a bomb.
TUXEDO
TUXEDO Computers - Linux Hardware in a tailor made suite Choose from a wide range of laptops and PCs in various sizes and shapes at TUXEDOComputers.com. Every machine comes pre-installed and ready-to-run with Linux. Full 24 months of warranty and lifetime support included!
Learn more about our full service package and all benefits from buying at TUXEDO.
Advertisement
Star Labs
Star Labs - Laptops built for Linux.
View our range including the highly anticipated StarFighter. Available with coreboot open-source firmware and a choice of Ubuntu, elementary, Manjaro and more. Visit Star Labs for information, to buy and get support.
Shells.com
Your own personal Linux computer in the cloud, available on any device. Supported operating systems include Android, Debian, Fedora, KDE neon, Kubuntu, Linux Mint, Manjaro and Ubuntu, ready in minutes.
Starting at US$4.95 per month, 7-day money-back guarantee
Copyright (C) 2001 - 2023 Atea Ataroa Limited. All rights reserved. All trademarks are the property of their respective owners. Privacy policy. Change privacy settings. DistroWatch.com is hosted at Copenhagen.
Contact, corrections and suggestions: Jesse Smith
Tips: bc1qtede6f7adcce4kjpgx0e5j68wwgtdxrek2qvc4 86fA3qPTeQtNb2k1vLwEQaAp3XxkvvvXt69gSG5LGunXXikK9koPWZaRQgfFPBPWhMgXjPjccy9LA9xRFchPWQAnPvxh5Le PayPal.me/distrow • Patreon.com/distrowatch