pfsense

[r00igev@@r]

not sure what you define as fancypants but it has a gui, firewall-config

I'll look at that one when I have a gap. Might be a useful kortbroek alternative.

 

[r00igev@@r]

ferm ftw.

Could probably handle pf too, if someone built some abstraction.

Looks like a nifty tool.

 

[Kingskid]

Interesting information shared thanks everyone, what would the opinion be on something like IPFire (asking to learn , not suggesting an alternative)

 

[RonSwanson]

Interesting information shared thanks everyone, what would the opinion be on something like IPFire (asking to learn , not suggesting an alternative)

Depends on your learning objectives, exactly what is it that you want to learn?
IPFire (from what I can see) looks good, I have no experience except for a few years ago when I ran it on a local machine in my home lab. It was quite limited back then, from what I can tell from the screenshots it has a whole lot more functionality today.
PFSense (and Sophos UTM or Sophos XG) probably offer the broadest learning experience on UTM security.
For in-depth firewalling and IPTables, ferm seems to be great, and as can be seen here, has quite a huge following.

 

[rambo919]

A few small new firewall projects are active but none of them are mature.

Even KDE is creating a firewall.

 

[r00igev@@r]

I often use IPSET in linux as it allows a single rule and removes the performance impact. None of that is in any UI.

 

[TheRoDent]

B<ferm> - a firewall rule parser for linux

set
Checks the source or destination IP/Port/MAC against a set.

mod set set badguys src DROP;

 

[r00igev@@r]

B<ferm> - a firewall rule parser for linux

How do you use that where you have a file of IPs? Still need to issue the IPSET to create the list separately?