From nobody Thu Sep 30 12:51:41 2021 X-Original-To: freebsd-chat@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 1072E1759773 for ; Thu, 30 Sep 2021 12:51:57 +0000 (UTC) (envelope-from ceo.teo.en.ming@gmail.com) Received: from mail-yb1-xb30.google.com (mail-yb1-xb30.google.com [IPv6:2607:f8b0:4864:20::b30]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HKtRc1xFhz3QRJ for ; Thu, 30 Sep 2021 12:51:56 +0000 (UTC) (envelope-from ceo.teo.en.ming@gmail.com) Received: by mail-yb1-xb30.google.com with SMTP id q81so4672246ybq.5 for ; Thu, 30 Sep 2021 05:51:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to:cc :content-transfer-encoding; bh=SwhvPYzijJR7zHNBCN6mjMiui00YGDEbuLe78vy6y3o=; b=fT7huNzgzDP1vZw3Ua7mltdycLCHqGXqC1zRzorSJBfI3UCq3lr16UsHAhh9i1oE3l GGY+rar9f0WH2hJAkBBuMM/pwxMxY/vQBb0gdpdD9RWVEg9yGhURJxRawUZuvNKi58Qu Al1eSy54Zr4ghzWbBnFQJ5pZgQfrcbTsCp1lS40Dc+Aj0kwGHrms35XBsQuoJaWZuPT0 yFno5tHQoMGoAELKuMBdzwigqv4U+DDC0qZYZkzX0DztlJfSf0oWLQ/KtyXEGaGCwnaE Qd3k6djZkCaQixol8eWI6o8Mxvl5Djb48K1HCcJMnioasGffJTrDQV02neOuAMogA7Lq i2JQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc :content-transfer-encoding; bh=SwhvPYzijJR7zHNBCN6mjMiui00YGDEbuLe78vy6y3o=; b=l5KaQ7AZZHuH1Rb1Dbfn29C/Y4tUZ4JuCOgYboGovCOUtOEJ0hiF2fBuuN4Gzlzgmj JwmPwet7Soivy1GD88pcsK+GqFgBPVjAKTllKnb2Zs41QGI6KUzTLmzTxpIwhN4/ZaF5 3MXmAvsGr0pEkIwa+5sfkTjsauoRoQfDmYeTrmIxB9dbBm+RjGhekzmjvAJjwgkH1nu4 vsuYVSTN3xUMhSeMiANnQNnpdmO3/dtZv3oH24YTWbRNoTDjT16OHnmPDzKR/gNC4HTR gk5/CQqac4Vso1tKScXWCE+XJs+Z3rhvAWhXDjecVrtlqpKt3FKqF4jwFae8kJuvBUY7 Q8gQ== X-Gm-Message-State: AOAM5322hOfi4ywGze3cYSrAs7oP2Xow5d4j4KV2PqS/eWoEWMC9tWdP llBOs2cFYTDVUSS+z7GczPe2BAM7i01HDYcRsItiwe4FZNI= X-Google-Smtp-Source: ABdhPJz54f/ZOuuCDIrflgBcCgD0O5x2UNzGBa/lISklqZlrVZmhzHxSxXPN6XvYnUkaRpQeQay99d0qYEtsopn0x0A= X-Received: by 2002:a05:6902:102e:: with SMTP id x14mr7270595ybt.410.1633006309502; Thu, 30 Sep 2021 05:51:49 -0700 (PDT) List-Id: Non technical items related to the community List-Archive: https://lists.freebsd.org/archives/freebsd-chat List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-chat@freebsd.org MIME-Version: 1.0 From: Turritopsis Dohrnii Teo En Ming Date: Thu, 30 Sep 2021 20:51:41 +0800 Message-ID: Subject: I have bought a brand new firewall appliance in late Sep 2021 for only SGD$222 to run Snort IDS/IPS To: freebsd-chat@freebsd.org Cc: ceo@teo-en-ming-corp.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 4HKtRc1xFhz3QRJ X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b=fT7huNzg; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of ceoteoenming@gmail.com designates 2607:f8b0:4864:20::b30 as permitted sender) smtp.mailfrom=ceoteoenming@gmail.com X-Spamd-Result: default: False [-3.00 / 15.00]; FREEMAIL_FROM(0.00)[gmail.com]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; SUBJECT_HAS_CURRENCY(1.00)[]; TO_DN_NONE(0.00)[]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; SH_EMAIL_DBL_DONT_QUERY_IPS(0.00)[192.168.1.110:email]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-chat@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::b30:from]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-ThisMailContainsUnwantedMimeParts: N Subject: I have bought a brand new firewall appliance in late Sep 2021 for only SGD$222 to run Snort IDS/IPS Good day from Singapore, I have just bought a brand new firewall appliance for only SGD$222, which comes with pfSense community edition firewall pre-installed. pfSense firewall is based on FreeBSD. The firewall appliance is Made in China and ships internationally from China. My order was placed on Lazada on 19 Sep 2021 Sun at 4.46 PM Singapore Time. I received the firewall appliance in Singapore on 28 Sep 2021 Tue at 5:50 PM Singapore Time. International shipping cost from China to Singapore is about SGD$1.50. I am planning to try out all the 10+ open source firewalls on my brand new firewall appliance. No open source firewall is complete without Snort Intrusion Detection System (IDS)/Intrusion Prevention System (IPS). Nowadays, an Intrusion Prevention System (IPS) is a must. I will need to check whether my pfSense firewall comes with Snort IDS/IPS pre-installed. If it isn't, I will manually install the package. You can watch a short 4-minute video clip of my brand new firewall appliance on YouTube. Title of YouTube video: Turritopsis Dohrnii Teo En Ming Unboxing His Brand New $222 Firewall Appliance on 28 Sep 2021 Tue Link: https://www.youtube.com/watch?v=3D5LNzqCnkJHI These are the technical specifications of my brand new firewall appliance. Support DIY Intel Celeron J3160 Quad Core (2M Cache, 1.60GHz up to 2.24GHz) Intel HD Graphics 400 1 x DDR3L SO-DIMM Socket (Up to 8G, 1333/1600MHz) 4 x Intel Gigabit LAN 1 x VGA 1 x HDMI 1 x USB 3.0 + 1 x USB 2.0 1 x mSATA SSD Slot 1 x SATA Port, support 2.5'' HDD / SSD Support Windows, Linux, Pfsense, OPNsense support AES-NI 4 GB RAM installed 64 GB SSD installed Aluminum Case Fanless Intel Celeron J3160 Quad Core Mini PC with 4 Gigabit LAN, VGA, HDMI, USB 3.0 USB 2.0 1) This is Intel Celeron J3160 Quad Core Mini PC, without wifi module anten= na 2) Intel Celeron J3160 Quad Core (1.6GHz Up To 2.24GHz 2M Cache) 3) 1 x DDR3L SO-DIMM Socket (Up to 8G, 1333/1600MHz) 4) 4 x Gigabit LAN 5) 1 x VGA + 1 x HDMI 6) 1 x USB 3.0 + 1 x USB 2.0 7) 1 x Mini-PCIe for mSATA SSD 8) 1 x SATA Port, support SATA SSD or 2.5 inch SATA HDD 9) Support Windows 7, Windows 8, Windows 10, Linux 10) 4 GB RAM installed 11) 64 GB SSD installed Cooling Mode: Aluminum Case Fanless Design CPU: Intel Celeron J3160 Quad Core (1.6GHz Up To 2.24GHz 2M Cache) CPU TDP: 10W Memory: 1 x DDR3L SO-DIMM Socket (Up to 8G, 1333/1600MHz) Storage: 1 x mSATA 1 x SATA Port, support SATA SSD or 2.5 inch SATA HDD Graphics: Intel HD Graphics LAN Chipset: 4 x Intel I211 Gigabit LAN WLAN: Optional OS Support: Windows 7, Windows 8, Windows 10, Linux, pfSense Security & Reliability: Support AES-NI (Intel AES New Instructions) Port: Front Port: 1 x Power Button (with indicator light) 2 x USB 3.0 1 x HDMI 1 x VGA 1 x RST Button Back Port: 4 x Intel I211 Gigabit LAN 1 x 12V DC Power Jack Material: Aluminum Weight: 1.25KG Power Adapter: DC 12V Expansion: 1 x Mini-PCIE for SIM card What's in Box: 1 x Mini PC 1 x Power Adapter 1 x Power Cable 4 GB RAM installed 64 GB SSD installed Below is the System Information from the Dashboard of pfSense firewall. System Information =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Name: pfSense.teo-en-ming-corp.com User: admin@192.168.1.110 (Local Database) System: pfSense Netgate Device ID: 51194252252ab8defd14 BIOS: Vendor: American Megatrends Inc. Version: 5.11 Release Date: Sun Jun 23 2019 Version: 2.5.2-RELEASE (amd64) built on Fri Jul 02 15:33:00 EDT 2021 FreeBSD 12.2-STABLE Unable to check for updates CPU Type: Intel(R) Celeron(R) CPU J3160 @ 1.60GHz 4 CPUs: 1 package(s) x 4 core(s) AES-NI CPU Crypto: Yes (inactive) QAT Crypto: No Hardware cyrpto: Kernel PTI: Enabled MDS Mitigation: Inactive Uptime: 00 Hour 28 Minutes 29 Seconds Current date/time: Wed Sep 29 7:10:27 +08 2021 (wrong date and time, unable to connect to NTP server without WAN connection yet) DNS server(s): 127.0.0.1 8.8.8.8 8.8.4.4 Last config change: Wed Sep 29 6:46:48 +08 2021 (wrong date and time, unable to connect to NTP server without WAN connection yet) State table size: 0% (260/394000) MBUF Usage: 0% (3600/1000000) Temperature: 26.9=C2=B0C Load average: 0.24, 0.28, 0.24 CPU usage: 2% Memory usage: 7% of 3944 MiB SWAP usage: 0% of 2689 MiB Disk usage: /: 2% of 55GiB - ufs /var/run: 3% of 3.4MiB - ufs in RAM List of open source firewalls which you can try on this firewall appliance =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D (A) 8 Best Open Source Firewall to Protect Your Network Link: https://geekflare.com/best-open-source-firewall/ (B) Top 10 Best Open Source Firewall to Protect Your Enterprise Network 202= 1 Link: https://cybersecuritynews.com/best-open-source-firewall/ (C) 12 Best Open Source Firewalls Comparable to Commercial Solutions Link: https://www.networkstraining.com/best-open-source-firewalls/ (D) List of Top 12 Open Source Firewalls in 2020 Link: https://www.knowledgenile.com/blogs/open-source-firewalls/ (E) Top 9 Best Free and Open Source Firewall Software For Windows and linux Link: https://cloudsmallbusinessservice.com/blog/top-9-best-free-and-open-s= ource-firewall-software-for-windows-and-linux-69022.html (F) Open Source Firewalls: The Best in the Business Link: https://www.opensourceforu.com/2018/12/open-source-firewalls-the-best= -in-the-business/ I am wondering if my super duper cheap brand new firewall appliance is able to run Snort IDS/IPS under heavy workloads. Can I install a SIM card in the firewall appliance for 4G connectivity? Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 29 Sep 2021, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a System Integrator (SI)/computer firm in Singapore. He is an IT enthusiast. -----BEGIN EMAIL SIGNATURE----- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html ***************************************************************************= ***************** Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020): [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -----END EMAIL SIGNATURE-----