I love RPi. Used to tinker with them a lot before!
I do not know if you like pictures, but here are some of them:
Interesting, but Iāll stick tp my sturdy old Linksys 1900 ACS (flashed with OpenWRT), and a PiHole running on a Raspberry Zero, for now.
Wow, itās like Christmasā¦I go to sleep and then thereās all these reply Gifts to unwrap!
So all you Swedes do a lot of networking (maybe sharing borders with Russia will stir that up?), as I found this page helpful too: https://teklager.se/en/best-free-linux-router-firewall-software-2019/
And as the hardware Iāve got will apparently not work properly with the BSDs Iāll go with IPFire, and let you guys know how I get on.
The hardware is a bit of an edge case; a headless(decapitated) Toshiba i7 with 10GB Ram, and 120GB SSD, with the naturally single ethernet port running a Realtek chip (I think). So I got a TP-link UE300 USB Network adapter to go with it for the second port. Using such a computer has the advantage that the battery acts as a UPS in power outages, which do occur here frequently, but for short amounts of time.
^^ IPFire in actionā¦interesting to see what countries are hitting our firewall!
And the hardware itself. The white dongle at left is the TP-UE300 USB. Above that is the Qualcomm ethernet. I love recycling old otherwise useless hardware!
And FYI for anyone else considering IPFire; I ran into an issue with the DNS, where it wouldnāt work with my ISPās provided ones, but thatās okay with me, because I use OpenDNS.
Strange, maybe your ISP only accepts DNS over UDP?
Usually DNS is over UDP, however sometimes it uses TCP tooā¦
Yeh, it seems to be a IPFIRE issue: https://community.ipfire.org/t/dns-status-broken/2080/10
I tried with UDP first (itās default), then TCP. The ISPās DNS wonāt workā¦but that is literally a feature, not a bug, as I want to force my children through the OpenDNS servers.
Yes, itās important, nowadays Internet can be dangerous for kids.
Can you disable DNSSEC in IPFIRE? According to those logs it seems that itās DNSSEC
It would seem so.
I guess if you disable, your ISP DNS would work, however you wonāt be able to double check if the DNS responses you are receiving are indeed non alteredā¦