Great Success/Deployed Nethserver 6.9

[111110100]

Hi All,

Just had a successful deployment of a Nethserver to replace an aging Untangle. I used an old IBM x346 server slapped with a 3Com 3c980c for additional ports (Donald Becker, thank you).

I have a multi-wan setup with 7-8 different groups sharing the Internet. I bonded the remaining ethernet for the Green interface.

Since Nethserver does not have a way to throttle bandwidth per group, I accomplished that by putting them all behind a Cisco switch and do it from there.

Only problem now is how to get some Nethserver swag.

[alefattorini (Alessio Fattorini)]

Thanks for your post, so you’re an untangle expert. I’m very curious on the differences.

Why Is NethServer better than Untangle from your point of view?

I suggest you even this discussion

Is NethServer better than a dedicated utm distro?

Am I crazy or are you guys saying that ns is better than a dedicated utm distro? I am planning on building out a sophos utm router/firewall, should I look into using ns instead? I am a bit of a noob so does it make sense for me?

@111110100

Since Nethserver does not have a way to throttle bandwidth per group,

Do you mean by IP range? Take a look at this

Nethserver 6.7 How to Bandwidth Control

This panel is just for RED interface and it is used to specify the maximum amount of bandwidth available in both outgoing and incoming directions. VLAN isn’t still supported on Traffic shaping, you need to define a CIDR object with the VLAN network and make small trick by shell, this command will create a new rule: db tc set "cidr;your_new_cdr_name" ip Description "Low priority" Priority 3 signal-event firewall-adjust

@111110100

Only problem now is how to get some Nethserver swag.

That’s the place! NethServer Store is opened!

[111110100]

1. Fell in love with the policy route. So easy. I could dive in and do it the hard way but why would I if there’s an easier way?

2. Strength of Untangle is is the packages they include like web filtering. Everything else is just the same with Nethserver.

3. We throttle by specific bandwidth per group. Say the finance group will only be given 5mbps, sales and marketing 10mbps, editorial 20mbps and so on.

[alefattorini (Alessio Fattorini)]

@111110100

Fell in love with the policy route. So easy. I could dive in and do it the hard way but why would I if there’s an easier way?

Fell in ?

@111110100

Strength of Untangle is is the packages they include like web filtering

What do you mean? Blacklists? We include web filtering too

[111110100]

@alefattorini

What do you mean? Blacklists? We include web filtering too

Apologies, I should’ve been more explicit.

What I like about Untangle is that each service is independent from each other which are basically two things: rules and logs.

Untangle has a rich pre-defined rules that you can just enable/disable at will.

Untangle can be easier to use for people who are new to firewall+utm.

A website got blocked? Check the Web filter rules and logs. Untangle’s Web filter also allows you to block a site and add a comment/reason that the user will see on the page.

I really have to give Ease of Use points to Untangle. I can monitor what went thru and what was blocked by each module without having to grep/awk logs.