singularity
firewalla
singularity | firewalla | |
---|---|---|
2 | 67 | |
974 | 526 | |
1.2% | 1.3% | |
4.7 | 9.9 | |
15 days ago | 6 days ago | |
JavaScript | JavaScript | |
MIT License | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
singularity
-
Tailscale bug allowed a person to share nodes from other tailnets to themselves
Perhaps the biggest revelation from this is that Firefox doesn't implement rebinding protection, and that CGNAT DNS responses aren't dropped by most resolvers. Host validation is preferable anyway [1] but the second problem still has bad implications.
1. https://github.com/nccgroup/singularity/wiki/Preventing-DNS-...
- A DNS rebinding attack framework.
firewalla
- Home Lab Guide
-
would FW software run on a device like this?
firewalla is open source https://github.com/firewalla/firewalla
-
Firewalla Advice for a small business
Just to follow up because I think I misread OP—they’re looking at Firewalla who publishes their source on github, and it looks a lot like your classic FOSS firewall running suricata and probably doing DNS-based filtering. I bet if you dig into their source you’ll find dnscryptproxy, unbound, or dnsmasq with filter sets.
-
Does the VPN client terminate "inside/behind" the firewall or in front of it?
Using the Firewalla VPN Client for a 3rd party connection is one way. What this means is that devices on your network can initiate connections through the VPN to external addresses, and those external addresses can respond and make use of the established connection (ex: your machine uses a browser to request the webpage https://help.firewalla.com through the vpn connection, and the server hosting the webpage receives the request and is able to respond, by sending the requested webpage)
- Manage rules with command line
-
Best way to use Pi-Hole while utilizing all the FWG features
search https://help.firewalla.com you will find more articles on this topic. And if not, the communitly likely have more https://help.firewalla.com/hc/en-us/community/topics/360001948014-Expanding-Firewalla-Docker-Third-Party-Apps-Scripts-
-
Configuring TP Link Omada Controller docker container
there are a few threads https://help.firewalla.com like this https://help.firewalla.com/hc/en-us/community/posts/4411622449811-Omada-Controller-Docker
-
Feature Request: CrowdSec
From my understanding zeek does the inspection (probably not https / tls ) and generates alerts (internally) which Firewallas software (https://github.com/firewalla/firewalla) picks up and analyses then throws out alerts / blocks as they see fit.
- Any way to use the Firewalla license from my device which was stolen?
-
Software
Technically yes, but also maybe no. Firewalla's software is open source. You can download and modify it on GitHub. If you really wanted to, you could fork it and strip out all of the firewalla-specific code (ie licensing, app integration, etc.) and replace it with your own code.
What are some alternatives?
johnny-five - JavaScript Robotics and IoT programming framework, developed at Bocoup.
opencti - Open Cyber Threat Intelligence Platform
reconmap - Vulnerability assessment and penetration testing automation and reporting platform for teams.
RPi-Monitor - Real time monitoring for embedded devices
Nginx Proxy Manager - Docker container for managing Nginx proxy hosts with a simple, powerful interface
Home-AssistantConfig - :house: Home Assistant configuration & Documentation for my Smart House. Write-ups, videos, part lists, and links throughout. Be sure to :star: it. Updated FREQUENTLY!
nginx-proxy-manager-dns
logger - ✔️ Simple, pretty and powerful logger for android
rpi-remotely-img - Customizing Raspberry Pi system image, so it's SSH available over the Internet on first boot.
mellow - Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux. Also a Proxifier alternative.
t-mobile-throttle-defeat - linux settings (jessy debian on raspberry pi 3) to defeat T-mobile throttling
pornaway - PornAway: Block adult sites