Simplistic firewall suggestion

[Herr der Verboten]

For now the use case simply is for known application

1. Deny all traffic
2. Allow incoming for white listed IPs

PfSense?

 

[saor]

Windows firewall outgoing block all:
https://superuser.com/questions/118...ing-and-outgoing-internet-access-except-those

Windows firewall incoming IP filter:
https://www.oryon.net/knowledge-base/article/how-to-add-ip-address-in-windows-firewall/#:~:text=Step%201)%20On%20the%20Start,the%20option%20'Inbound%20Rules'.

 

[Herr der Verboten]

Windows firewall outgoing block all:
https://superuser.com/questions/118...ing-and-outgoing-internet-access-except-those

Windows firewall incoming IP filter:
https://www.oryon.net/knowledge-base/article/how-to-add-ip-address-in-windows-firewall/#:~:text=Step%201)%20On%20the%20Start,the%20option%20'Inbound%20Rules'.

doesn't sound as fancy or 1337 as pfsense

 

[killerbyte]

For now the use case simply is for known application

1. Deny all traffic
2. Allow incoming for white listed IPs

PfSense?

If these are your requirements then a Mikrotik will do it for you.

 

[RedViking]

You mean besides Windows Firewall?

Okay, buy and install Kaspersky

 

[Herr der Verboten]

If these are your requirements then a Mikrotik will do it for you.

Not really looking at hardware level yet, of course windows firewall I suppose is adequate, but would be nice to drop in an allow / deny list for app and ip ranges. Pft. Might as well squid it?

 

[Gnome]

For now the use case simply is for known application

1. Deny all traffic
2. Allow incoming for white listed IPs

PfSense?

If you could elaborate on your reason for allow list of IPs a whole bunch of improvement suggestions can be made.

This all said, I have a friend that told me how bad pfSense is, hardcore Mikrotik supporter and user.
I had a pfSense box for sale so he gave it a try for a week.
At the end of that week Mikrotik got dropped like a hot potato.

I'll say this however, pfSense doesn't make sense if you don't have the hardware.
If you are planning on running it virtualized or on an "old desktop you had lying around", I'd suggest Mikrotik.
pfSense is more expensive than Mikrotik, there is no doubt about it, at least if you want to use it and have a good and reliable experience

 

[r00igev@@r]

Nftables

 

[lkpat]

Nftables

Yes