SayCyberOnceMore

syncthing’s development is alive & well.

I’m presuming you’re referring to the Android wrapper that had it’s last update 2 weeks ago?

The Syncthing-Fork project is also still alive & (presumably) continuing on

That’s a great idea, I hadn’t thought of that

I have a single connection to the 'net, hence a single firewall.

I’ve port scanned my firewall (externally) when travelling for work, so I’ve verified what’s exposed and verified that GeoIP works (forgot to enable a region before travelling there), so I’ve reached the point where I’m happy with this setup

Fair point, I neglected to mention that I have >1 Public IP The firewall directs traffic as required.

Whatever you choose, consider a donation to the devs, that’s what helps prevent these apps from dying

Or Syncthing…

Kinda Scenario 1 is the standard way: firewall at the perimeter with separately isolated networks for DMZ, LAN & Wifi

The Firewall provides a proxy for anything in the DMZ, so all the filtering is done there and not on the DMZ device(s).

GeoIP on the firewall, so anything that’s opened to the interweb - inc. inbound VPNs can only come from selected regions.

Fail2Ban on DMZ device(s), to prevent repeated login attacks.

Wifi has multiple SSIDs to block / permit outbound access to the internet (IoT stuff), LAN (Guests), etc.

Then regular updates / patching / backups…

2nd hand Ruckus.

They’re decent quality that you’d see in a commercial / enterprise setting (so PoE), but Ruckus also have their “Unleashed” firmware which removes the need for a WLC.

I have 2 in a mesh at home and easily support many IoT devices, phones, laptops, etc on multiple SSIDs

This still makes me laugh:

Banana Pi BPI-R3. There is currently no text in this page. You can search for this page title in other pages, or search the related logs, but you do not have permission to create this page.

Er… thanks?

In other articles, I’m reading that Banana Pi quality control isn’t that great, so I’m currently feeling that this might not be boards I am looking for

I’d like to replace my router as it’s only acting as a PPPoE modem for my pfSense box - this looks a bit of overkill, but interested if there’s other (open) options?