this post was submitted on 01 Jul 2026
38 points (97.5% liked)

Selfhosted

60366 readers
976 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

Hiya, looking the a firewall for my homelab, mostly to experiment but also for a added layer of security. There are just two of us in this household with a few laptops, phones and my servers, so nothing much. Therefore looking for something affordable and not "overkill".

Anyone got any recommendations for this? Also how do you run your opensense/pfsense instance?

Appreciate any tips!

you are viewing a single comment's thread
view the rest of the comments
[–] thelittleblackbird@lemmy.world 3 points 21 hours ago (1 children)

Take a sophos second hand FW.

Intel nic, low power consumption processors and full opnsense support.

Go at least for 4gb ram and the most powerful processor you can safely get. It will come with a lot of eth ports too on top.

And it will cost close to 100€, probably less if you struck a good deal

[–] pjusk@lemmy.dbzer0.com 1 points 19 hours ago (1 children)

Good shout, on our second hand market there is currently a Sophos SG-115 for sale for 100ish euros. It includes an AP 55C and a Unifi poe adapter. Doesnt seem too bad a deal to me. What do u think?

[–] thelittleblackbird@lemmy.world 1 points 9 hours ago (1 children)

Which hw revision?

If it is a ver3 it is the same I have, good for FW and red services, you can make complex setups.

It is a bit short on cpu for ips systems(suricata and zenarmor) , but it is able to do dns filtering via adguard or unbound.

100€ sounds good to me if it comes with AP, people here are happy with that brand

Good luck

[–] pjusk@lemmy.dbzer0.com 1 points 9 hours ago (1 children)

Looks to be the second revision.

[–] thelittleblackbird@lemmy.world 2 points 8 hours ago

Try to find a rev3, the cpu upgrade really is really worthy