Announcement

Collapse
No announcement yet.

PFSense Firewall Group purchase interest

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    For me that seems like a pretty decent price break.

    Understood. I tend to push sometimes to extricate blood out of stones. That is me though. It is understood that they have to make monies.

    Yeah here have ventured out of mainland China (virtually) and still staying in the Pacific Rim.

    Shipping and monies has always been an issue or concern. I am not writing about this in a negative sense; rather that is the way it is type sense. It is always their money and their bank rules that get in the way of global stuff. Historically most reasonable shipping is using conventional shipping from China Post to US Post and it is fast versus anything else. There has been a push here of re shippers and that has caused delays here of up to a month which sucks.

    I tested a new 8 drive NAS case a few years back and did the DIY on Serve The Home with pictures. It was only an 8 drive hot swap drive case that was hard to find and build. I didn't get really specific with the price and the shipping cost because the vendor had agreed to ship it to me almost gratis and sell me the product more to check it out than to sell it here (such that the price was OK). That and it did cost me to a la carte the device (power supply, memory, 4TB drives, LSi card et al - one piece at a time didn't really seem that expensive.)

    I did get a nice price (under $100) for an almost barebones motherboard / CPU (no memory or mSATA or m.2Sata) for a J1900 with is old news now. The back and forth chatting did include much dialog but no mention of AES-IN; just PFSense every other sentence.

    I may consider making my own for a similar 4 port box.

    There have been other folks here on the Homeseer forum that that have done similar but just gone to Amazon and purchase the product via Amazon Prime.

    Yeah here just going baby steps as I am doing this endeavor mostly pro bono and I already have a PFSense firewall with all of the bells and whistles. I just want something smaller than I can fit inside of my telco media can (Managed network, POE network, modem, power supply, punch panel, telephone managment, telephone VOIP such that the add of a firewall would be nice for my LAN (and WAN and Telco)) in a can solution (big at a Leviton 42" can and getting crowded a bit).
    Last edited by Pete; August 19, 2017, 07:33 PM.
    - Pete

    Auto mator
    Homeseer 3 Pro - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e 64 bit Intel Haswell CPU 16Gb
    Homeseer Zee2 (Lite) - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e - CherryTrail x5-Z8350 BeeLink 4Gb BT3 Pro
    HS4 Lite - Ubuntu 22.04 / Lenovo Tiny M900 / 32Gb Ram

    HS4 Pro - V4.1.18.1 - Ubuntu 22.04 / Lenova Tiny M900 / 32Gb Ram
    HSTouch on Intel tabletop tablets (Jogglers) - Asus AIO - Windows 11

    X10, UPB, Zigbee, ZWave and Wifi MQTT automation-Tasmota-Espurna. OmniPro 2, Russound zoned audio, Alexa, Cheaper RFID, W800 and Home Assistant

    Comment


      Originally posted by Pete View Post
      It does support AES-NI encryption. It is on the low end and priced a bit too high right now at under $200 (just under) which is still too high for me.

      The current warranty on it is 2 years. I dunno about this and it could be related to the eMMC. It does wear down over time.

      Baby steps here...and really so what that Intel is making a deal out stating that AES-NI is included and making it sound brand new.

      Many folks are having a hard time trying to figure out why Intel just didn't include AES-NI in the first place on some CPUs in the last few years where as AMD / ARM has included AES-NI all along.

      Personally I am only one person here and tend to make mountains out of mole hills sometimes.

      It's been presented to me like a restaurant menu and picking food a la carte. (from design pieces put together to make a nice meal of sorts )


      Have a read over here:


      Intel-Celeron-Processor-N3450-2M-Cache-up-to-2_2-GHz


      Security & Reliability


      Intel makes it sound new where as it is only new for this SOC chip set. Everybody else has done it now for over 3 years.*

      Most at home SOHO routers have not been typically utilized for multiple VPN tunnels.

      Concurrently now you have entities (countries) trying to figure out how to block VPN tunnels cuz they cannot see inside of them. Tit for tat stuff.
      Yup, that's why I looked at a lot of boxes and decided on building my own.

      I got the asrock j3255-itx for $59, it's apollo lake and supports aes-ni
      Also got an Intel dual nic pci-e card (~25$)
      Put it in a cheap case with built in psu (~$60)
      Added a cheap 40GB ssd
      And I already had some ddr3 ram lying around.

      The whole thing cost me around $200

      I use vpn for my whole internet connection. I can easily saturate my 50mbps with encrypted traffic and the cpu usage hovers at around 20%. Mine is dual core, and I'm sure the quad core version handles significantly higher traffic

      Comment


        Personally here have historically enjoyed DIY built my computers; well and firewalls.

        I do savor the time building the boxes piece by piece.

        I have documented many of those builds right here on Homeseer over the years.

        That and IT automation / SOHO stuff is more of a hobby than related to work I have done.

        I did start automation though here using enterprise Cisco everything (which was a bit much for the home) because that is all I was familiar with; well and HP enterprise servers type stuff.

        You could hear the stuff in the basement from the main floor of the home and the lights would flicker here when turning on stuff. Concurrently always looked for cheaper faster stuff that I could use at home.

        The documented Zoneminder box here ==> Zoneminder Ubuntu Server Installation with ZMXAP,MCSXP & X10

        I posted this in 2010 (7 years ago). xAP was being utilized for a bunch of stuff back then and it ran on Linux just fine (well and it does today). This was probably 3rd hardware build of a Zoneminder box (which originally was an analog NVR and I had to hand build the Zoneminder OS. I have now reduced the footprint some removing the analog 8 chip capture card) and I am up three revisions from this box. I did take pictures a bit at a time of the build. Well and used the build as an excuse to update my digital camera. Not really in to taking pictures here with my smartphone.

        The NAS box I mentioned earlier was the end box of a few DIY boxes I built in to tower cases with much room for drive cages at the time. Finally I thought it would be nice to build a NAS in a NAS box. It is using an mITX board and I have extended the PCiE to the top of the case with the LSi card. Very tight and not for a novice DIYer.

        This is a small forum of a collection of folks that have been automating with Homeseer from the late 1990's to a collection of folks automating for the first time. I have only done similar once in the last 20 years (group purchase). Personally just did a bulk purchase of a widget and packaged it one by one or two as one charging for USPS shipping and nothing much for time involved in shipping. I did this as a give back to the Homeseer users more than anything at the time.
        Last edited by Pete; August 19, 2017, 06:26 PM.
        - Pete

        Auto mator
        Homeseer 3 Pro - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e 64 bit Intel Haswell CPU 16Gb
        Homeseer Zee2 (Lite) - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e - CherryTrail x5-Z8350 BeeLink 4Gb BT3 Pro
        HS4 Lite - Ubuntu 22.04 / Lenovo Tiny M900 / 32Gb Ram

        HS4 Pro - V4.1.18.1 - Ubuntu 22.04 / Lenova Tiny M900 / 32Gb Ram
        HSTouch on Intel tabletop tablets (Jogglers) - Asus AIO - Windows 11

        X10, UPB, Zigbee, ZWave and Wifi MQTT automation-Tasmota-Espurna. OmniPro 2, Russound zoned audio, Alexa, Cheaper RFID, W800 and Home Assistant

        Comment


          I bought on ebay a thin client - "HP T610 Plus" for $60-and-change (with free shipping) and added a $20 HP NIC (bought on amazon, with free shipping as well). This thin client has a 16gb ssd and 4gb ram, which is more than enough for pfsense. Installed it and in couple minutes I have a corp-level firewall, no problems whatsoever..

          Comment


            Very nice!!!! Good price!!!
            - Pete

            Auto mator
            Homeseer 3 Pro - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e 64 bit Intel Haswell CPU 16Gb
            Homeseer Zee2 (Lite) - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e - CherryTrail x5-Z8350 BeeLink 4Gb BT3 Pro
            HS4 Lite - Ubuntu 22.04 / Lenovo Tiny M900 / 32Gb Ram

            HS4 Pro - V4.1.18.1 - Ubuntu 22.04 / Lenova Tiny M900 / 32Gb Ram
            HSTouch on Intel tabletop tablets (Jogglers) - Asus AIO - Windows 11

            X10, UPB, Zigbee, ZWave and Wifi MQTT automation-Tasmota-Espurna. OmniPro 2, Russound zoned audio, Alexa, Cheaper RFID, W800 and Home Assistant

            Comment


              An update. I got impatient and went my own way. I ordered and have received a fanless mini PC. 8 GB ram, 32 GB SSD, I5, 4 intel ethernet ports, 4 USB ports, HDMI. I have it installed and am now learning about pfSense and how to configure. I'm going the route of having the pfSense box with three routers each attached on a unique subnet. I'm moving from a single 192.168.0.xxx to a 10.0.1.xxx, 10.0.2.xxx, 10.0.3.xxx structure (trusted, semi-trusted/guest, IOT devices). I first heard about this architecture on a podcast by Steve Gibson called Security Now. It made a lot of sense to me given my network.

              Also, I am on a metered satellite connection with a monthly data cap so I want to make sure no devices are going outside my network unless I know about it. I certainly don't trust my cameras with all the recent news about them being hacked. Turns out that is creating a whole new set of challenges - being able to see all traffic on the WAN at the IP level. I'm getting there but dang it is a challenge. I love a good challenge. Should keep me busy for several weeks.

              Comment


                Good news logbuilder!!!

                Do you have a serial port on the fanless mini pc?
                - Pete

                Auto mator
                Homeseer 3 Pro - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e 64 bit Intel Haswell CPU 16Gb
                Homeseer Zee2 (Lite) - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e - CherryTrail x5-Z8350 BeeLink 4Gb BT3 Pro
                HS4 Lite - Ubuntu 22.04 / Lenovo Tiny M900 / 32Gb Ram

                HS4 Pro - V4.1.18.1 - Ubuntu 22.04 / Lenova Tiny M900 / 32Gb Ram
                HSTouch on Intel tabletop tablets (Jogglers) - Asus AIO - Windows 11

                X10, UPB, Zigbee, ZWave and Wifi MQTT automation-Tasmota-Espurna. OmniPro 2, Russound zoned audio, Alexa, Cheaper RFID, W800 and Home Assistant

                Comment


                  Originally posted by Pete View Post
                  Good news logbuilder!!!

                  Do you have a serial port on the fanless mini pc?
                  Yep but I'm not using it. Is there a good use for it? My monitor is HDMI and I have a USB keyboard. But now, all I seem to use is the web interface. Its nice.

                  Comment


                    Originally posted by logbuilder View Post
                    An update. I got impatient and went my own way. I ordered and have received a fanless mini PC. 8 GB ram, 32 GB SSD, I5, 4 intel ethernet ports, 4 USB ports, HDMI. I have it installed and am now learning about pfSense and how to configure. I'm going the route of having the pfSense box with three routers each attached on a unique subnet. I'm moving from a single 192.168.0.xxx to a 10.0.1.xxx, 10.0.2.xxx, 10.0.3.xxx structure (trusted, semi-trusted/guest, IOT devices). I first heard about this architecture on a podcast by Steve Gibson called Security Now. It made a lot of sense to me given my network.



                    Also, I am on a metered satellite connection with a monthly data cap so I want to make sure no devices are going outside my network unless I know about it. I certainly don't trust my cameras with all the recent news about them being hacked. Turns out that is creating a whole new set of challenges - being able to see all traffic on the WAN at the IP level. I'm getting there but dang it is a challenge. I love a good challenge. Should keep me busy for several weeks.


                    Your vlan setup is similar to mine and it works well. I have 3 right now, but might add more.

                    1. Trusted (all internal computers)
                    2. Cameras, I block them completely from the internet and have a pinhole in the firewall to the main vlan for viewing. I use HSTouch to proxy view them remotely.
                    3. Guest/iOT, access to only the internet and nothing internal. All my echos and streaming devices sit on this network.

                    I run a PBX in the house too utilizing SIP and plan to move this to its own vlan just to help with QOS.

                    It's worked really well and is much more secure.

                    Comment


                      PFSense Firewall Group purchase interest

                      That sounds like a sweet rig. You should be able to accomplish:
                      1. An internal network
                      2. A guest network with internet access only
                      3. IOT Device - no internet access and only allow access to your NVR on the appropriate port

                      Using a managed switch, and an enterprise wireless AP (I recommend Ubiquiti- but note that enterprise APs have a learning curve). You would need to configure ACL lists, 3 VLANS, default routes, and a DHCP server with access to the three VLANS.

                      PFblockerNG is your friend when it comes to blocking outbound/inbound traffic. @Pete steered me to it and I love it. With it, You can create rules that block known ad, spam, malicious, and telemetry sources by default with IP lists that you can have continuously update from known reputable sources. You can also create dns black lists that deny dns queries to know ad, spam, telemetry, and malicious sites based on known reputable DNSBL lists. This configuration would follow very closely to what was done with the Pi-Hole Project.

                      Sent from my iPhone using Tapatalk
                      Last edited by Kerat; August 29, 2017, 05:27 PM.

                      Comment


                        Is there a good use for it?

                        A GPS / PPS connection would give you good time sync.

                        Homeseer peer here is using hughes satellite and his time sync is always off a bit.

                        Here network ports are divided to two WAN and four LAN ports.
                        - Pete

                        Auto mator
                        Homeseer 3 Pro - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e 64 bit Intel Haswell CPU 16Gb
                        Homeseer Zee2 (Lite) - 3.0.0.548 (Linux) - Ubuntu 18.04/W7e - CherryTrail x5-Z8350 BeeLink 4Gb BT3 Pro
                        HS4 Lite - Ubuntu 22.04 / Lenovo Tiny M900 / 32Gb Ram

                        HS4 Pro - V4.1.18.1 - Ubuntu 22.04 / Lenova Tiny M900 / 32Gb Ram
                        HSTouch on Intel tabletop tablets (Jogglers) - Asus AIO - Windows 11

                        X10, UPB, Zigbee, ZWave and Wifi MQTT automation-Tasmota-Espurna. OmniPro 2, Russound zoned audio, Alexa, Cheaper RFID, W800 and Home Assistant

                        Comment


                          Originally posted by logbuilder View Post
                          An update. I got impatient and went my own way. I ordered and have received a fanless mini PC. 8 GB ram, 32 GB SSD, I5, 4 intel ethernet ports, 4 USB ports, HDMI. I have it installed and am now learning about pfSense and how to configure. I'm going the route of having the pfSense box with three routers each attached on a unique subnet. I'm moving from a single 192.168.0.xxx to a 10.0.1.xxx, 10.0.2.xxx, 10.0.3.xxx structure (trusted, semi-trusted/guest, IOT devices). I first heard about this architecture on a podcast by Steve Gibson called Security Now. It made a lot of sense to me given my network.

                          Also, I am on a metered satellite connection with a monthly data cap so I want to make sure no devices are going outside my network unless I know about it. I certainly don't trust my cameras with all the recent news about them being hacked. Turns out that is creating a whole new set of challenges - being able to see all traffic on the WAN at the IP level. I'm getting there but dang it is a challenge. I love a good challenge. Should keep me busy for several weeks.
                          This sounds great. I would love to know which mini PC you ended up getting
                          Cheers,
                          Bob
                          Web site | Help Desk | Feature Requests | Message Board

                          Comment


                            Originally posted by logbuilder View Post
                            An update. I got impatient and went my own way. I ordered and have received a fanless mini PC. 8 GB ram, 32 GB SSD, I5, 4 intel ethernet ports, 4 USB ports, HDMI. I have it installed and am now learning about pfSense and how to configure. I'm going the route of having the pfSense box with three routers each attached on a unique subnet. I'm moving from a single 192.168.0.xxx to a 10.0.1.xxx, 10.0.2.xxx, 10.0.3.xxx structure (trusted, semi-trusted/guest, IOT devices). I first heard about this architecture on a podcast by Steve Gibson called Security Now. It made a lot of sense to me given my network.

                            Also, I am on a metered satellite connection with a monthly data cap so I want to make sure no devices are going outside my network unless I know about it. I certainly don't trust my cameras with all the recent news about them being hacked. Turns out that is creating a whole new set of challenges - being able to see all traffic on the WAN at the IP level. I'm getting there but dang it is a challenge. I love a good challenge. Should keep me busy for several weeks.
                            The Security Now Podcast is what got me motivated as well. Using the ~50.00 router I do a lot but not as much as a Pf-sense device.
                            https://www.amazon.com/gp/product/B0...?ie=UTF8&psc=1

                            Comment


                              Originally posted by Blade View Post
                              This sounds great. I would love to know which mini PC you ended up getting
                              This one except with 32GB.

                              https://www.amazon.com/gp/product/B072Q872V9

                              Comment


                                Originally posted by logbuilder View Post


                                That is a sweet rig. And it comes with Intel onboard controller NICS!!!


                                Sent from my iPhone using Tapatalk

                                Comment

                                Working...
                                X