Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
Networking Security IT Linux

M0n0wall Fork SmallWall Has First Official Release 34

New submitter houstonbofh writes: When the m0n0wall project ended back in February, many people just did not want to lose their small and lean firewall. And now, one of the forks, SmallWall, has released it's first non-beta release. It has some small improvements to the GUI, and now has added L2TP support. The announcement with the changes can be found here. Also, a partnership with MIXTPC was announced, allowing firewalls with SmallWall preloaded to be purchased. Their web store is here.
This discussion has been archived. No new comments can be posted.

M0n0wall Fork SmallWall Has First Official Release

Comments Filter:
  • by weilawei ( 897823 ) on Friday June 12, 2015 @09:54PM (#49901887) Homepage

    User Handbook (single page) - Comming Soon!

    Alright then, so there's no updated docs. I'll just click the handy link to The m0n0wall Documentation Project - Chris Buechler [smallwall.org]. Oh wait, it's a 404. Nice going guys.

  • by fisted ( 2295862 ) on Friday June 12, 2015 @10:03PM (#49901921)

    small and lean firewall

    improvements to the GUI

    Uh-huh.

  • SmallWall has at least the virtues of a meaningful name that scans well and is easy to spell and pronounce.
  • by toadlife ( 301863 ) on Saturday June 13, 2015 @12:57AM (#49902517) Journal

    ...about a fork of one of the most popular (and awesome) FreeBSD-based firewall distros with the tag 'linux'...kindly die in a fire.

    Thank you.

  • The successor project to M0n0wall is OPNsense. To cite the project objectives

    The newest offspring, OPNsense (https://opnsense.org), aims to continue the open source spirit of m0n0wall while updating the technology to be ready for the future. In my view, it is the perfect way to bring the m0n0wall idea into 2015, and I encourage all current m0n0wall users to check out OPNsense and contribute if they can.
    Manuel Kasper

    His idea to have a web-based GUI to control all aspects of the firewall has become the standard for many open source and commercial solutions.

    The single XML file to store its entire configuration is another example of the miracles Manual brought to life.

    So is SmallWall in any way related to OPNsense?

    • by houstonbofh ( 602064 ) on Saturday June 13, 2015 @03:30AM (#49902803)
      If you read his final notice at http://m0n0.ch/wall/freeze_ann... [m0n0.ch] you will see more then OPNsense.

      Hello,

      as announced earlier, the m0n0wall mailing list and forum are now frozen. This is the final message, and I would like to take the opportunity to thank all those who have sent me emails with kind words and expressions of gratitude. They were too numerous for me to reply to individually, but they were all very much appreciated!

      There have been some questions on what the way forward is for current m0n0wall users. If you are happy with the current feature set of m0n0wall and just need a security patch, bug fix, hardware compatibility update or minor improvement now and then, there are two nascent projects started by former m0n0wall developers/users that may have something for you: SmallWall and t1n1wall.

      For a more feature-rich alternative that is still based on FreeBSD and has the same roots, both pfSense and OPNsense (which is a fork of the former) are excellent choices. They have higher hardware requirements than m0n0wall, but on the other hand, a lot of new embedded hardware has recently become available, with 2 GB or more of memory and 1 GHz or faster CPUs, at a similar price as earlier platforms. It makes sense (pun intended) to use these additional resources - something that m0n0wall hasn't been particularly good at in recent times. Just keep that in mind for your next hardware upgrade.

      Farewell, fellow m0n0wall enthusiasts.

      - Manuel
      28 February 2015

      Both SmallWall and t1n1wall.com are lean, and purpose built firewalls that do only one thing. They are not kitchen sink applications. They are meant to plug into web filters, not to be web filters.

      pfSense, and OPNsense are extensible firewalls with a plug in architecture. While expandable, they are more complex and heavier weight. A good example is to compare traffic shaping between them... M0n0wall, SmallWall and t1n1wall will win that contest hands down!

      • One thing to compare is the hardware requirements for running OPNsense versus m0n0wall or SmallWall. OPNsense requires essentially a fairly modern computer, whereas I run m0n0wall currently on a 15+ year old 600Mhz P3 (which spends about 90% of its time twiddling its thumbs). I'm guessing that almost no one who was running m0n0wall is able to install OPNsense on the same hardware, as the requirements for OPNsense would be extreme overkill for m0n0wall.

        That does bring up an interesting question about the M

        • One thing to compare is the hardware requirements for running OPNsense versus m0n0wall or SmallWall. OPNsense requires essentially a fairly modern computer, whereas I run m0n0wall currently on a 15+ year old 600Mhz P3 (which spends about 90% of its time twiddling its thumbs). I'm guessing that almost no one who was running m0n0wall is able to install OPNsense on the same hardware, as the requirements for OPNsense would be extreme overkill for m0n0wall.

          That does bring up an interesting question about the MIXTPC boxes. My understanding is that m0n0wall will only use one core in a multi-core system, a few tens of MB of disk space, only and certainly won't use more than 128MB of ram. The MIXTPC boxes will still work, but even the cheapest one at $250 is way more than you'll need.

          You are correct in that any modern box is overkill. But there is really no new hardware that is any cheaper... And SmallWall can use more than 128 meg of ram, as some tables live in ram and can grow large in heavy use environments. But I have seen very few boxes use more the 512 meg.
          As to multi-core, that is on the roadmap. It will be easier to support when the base is moved to FreeBSD 10.1 in the future.

  • OPNSense is more of a fork of pfSense and competes with that project. In fact, OPNSense was pretty much born of the fact that the pfSense developers made their development tools proprietary-licensed and pissed off some 3rd party developers as well as scaring a larger group of people that the whole project might become closed-source. SmallWall keeps the tiny aspect of M0n0Wall as a firewall and little else while *Sense are network security appliances, Asterisk servers, and pretty much anything else you wan

    • None of these are as small as *WRT distros and they still to this day only run on x86 and x64, but you get OpenBSD's packet filter (claimed by most to be superior to Linux's) bolted onto FreeBSD (for better hardware support?) and a BSD license if that matters to you.

      Also, good luck getting a *wrt to give gigabit sustained transfers. :) SmallWall and m0n0wall on modern hardware can give 900meg sustained transfers all day, and can do some hefty encryption on the side if needed for IPSEC.

      As to the projects that owe allegiance to m0n0wal, and the people that learned there... This is a quick peek at some of those people... http://www.smallwall.org/histo... [smallwall.org]

Heisengberg might have been here.

Working...