Secure tools to set up your home firewall/router.
Zenarmor is a high-performance, software-defined network security platform that deploys a complete Secure Access Service Edge (SASE) stack onto virtually any hardware or cloud environment.
WireGuard® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN.
To connect to your paid VPN, or to your home internet from anywhere in the world.
Some people use Tailscale for its simplicity.
Technitium DNS Server is an open source tool that can be used as a personal local DNS server for privacy & security. It includes Ad blocking feature combined with DNS-over-TLS and DNS-over-HTTPS support.
Unbound is a validating, recursive, and caching DNS resolver.
The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net.
Unbound is designed as.
Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF and its supporting vendors.
Very powerful instrusion detection security, but most users use zenarmor now (https://alternativeto.net/software/zenarmor/about)
An older alternative (if perhaps you're using an older/slower system), is Snort (https://alternativeto.net/software/snort/about).
Another powerful alternative is Zeek (https://alternativeto.net/software/zeek/about/).
Use the free version for security. A must have, as it uses almost no cpu.
OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the...
If you aren't ready to take the next step into OPNsense, get a decent router that allows hardware NAT and install this.
Alternatively, you can try dd-wrt (https://alternativeto.net/software/dd-wrt/about/)
OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources.
If you use something like a thin client + dedicated access point (much better and more secure than a router), this is the OS you will use.
It's like PFsense (https://alternativeto.net/software/pfsense/about/), but more open, and looks nicer.
Make sure to use dnscrypt-proxy and select anonymized relays.
No comments so far, maybe you want to be first?
