Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

For those that like to manage their own firewall and run IDS/IPS on their home networks, I'm curious - what are you using and is it power friendly?

I used to have a shelf full systems doing various things, but moving a lot had me trim down and I'm currently just using an off the shelf home wifi router, and need something with more power. Ideally running Linux, would like to run Suricata or Snort on it, maybe in IDS mode. And with logging to a database - that could offload that to another machine.

share|improve this question

closed as off-topic by Jens Erat, Stephane, Dog eat cat world, raz, Rory Alsop Jun 8 at 13:57

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

    
What services are you running that you would need an IDS setup? –  user606723 Aug 24 '11 at 19:49
1  
IDS is worthwhile for anyone in IT Security, or even in IT - you can watch for odd traffic - which may help you in your day job; you are more likely to spot anomalies; and you are bound to have something sensitive on your network you want to protect. –  Rory Alsop Aug 24 '11 at 20:09

3 Answers 3

Have in the past used a MikroTik as router and firewall, and a Mini-ITX running Snort and some more intelligent filtering than the basic MikroTik box. Don't know what the total power consumption was, but they didn't even get warm.

Easy to setup and they just work:-)

share|improve this answer
    
+1 for MikroTik - looks pretty good. Much cheaper than buying a Soekris box or a build your own VIA system. –  AngerClown Aug 25 '11 at 18:50
    
Yeah - I hadn't heard of them until @RoryMcCune introduced me to them - Cisco-ish interface and commands, very simple to configure and quite fully featured little boxen. –  Rory Alsop Aug 25 '11 at 20:57

You might want to check for Endian firewall community version, which as know is free and can be run in virtual machine.

share|improve this answer
    
Hi webcore - welcome to Security.SE. Once you have earned more rep you will be able to comment on other posts, but your 1st paragraph doesn't answer the question at all - the OP is not asking about mangle or the functionality so I have edited it out. For your 2nd paragraph, can you explain why running a virtual machine is power-friendly? Until you do, this doesn't answer the question. –  Rory Alsop Jun 8 at 10:56

Power friendly and powerful are hard to come by in cheap packages. It really depends on traffic workload. You may easily get away with some high end router (say ~$100) with OpenWRT. Check OpenWRT page for what models are supported. Get one with USB if you want to store more data on board or have a NAS handy.

The other option has already been mentioned - MikroTik. But that is a little bit more expensive and I have bad experience with MikroTik OS heavy customisation. It is some linux but it's highly proprietaty and there aren't many packages for it (ymmv).

And then, of course, there's Turris Lite. If you're feeling hacky, you may even build one of your own. The hardware is open source and it runs OpenWRT :)

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.