-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday, 2019-02-02 at 21:28 -0000, Dave Howorth wrote:
I've been thinking about security a bit. Most of my home security depends on my ADSL router and especially on the NAT it provides. Now I could try to harden every machine on my network, which I admit would be best practice, but (a) I'm lazy and (b) I've got little control over some of the devices on the network. So I've been wondering about putting another dedicated machine in between my router and my network to make it harder to penetrate. My router also provides my WAN, FWIW.
Is this at all sane? Would openSUSE make a good basis for the machine? What software would I need to run on it? What hardware power would I need?
Well, what I do is to activate the firewall on all internal machines. This doesn't cover everything, because are devices inside that do not have a firewall, and worse, do not have updates. Say printer, old TV recorder, or new ones, like Google Chromecast... Yes, it is possible to add a new firewall between the router and the home network. Yes, it can be a computer with two network sockets and Linux on it. Or it can be a router from the market - probably cheaper and easier to configure, but also doesn't get updates unless it is a professional grade router. Consider that a router-firewall in the middle is a complication when it comes to "multimedia" modern applications or gadgets. Things like online games, for instance. - -- Cheers, Carlos E. R. (from openSUSE 15.0 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXFYRRBwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVZtsAn1ASYH+Cwbf0DvjSQESf ZudM86S3AJ4mumqmq8/CAsoBA5NEWuSV51XoTg== =bLLj -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org