Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are looking to replace our current aging firewall/router with a new one.

We would prefer it to be free/opensource if possible.

Our minimum requirements would be:

1) Site-to-site VPN
2) Web URL/IP filtering
3) 2 WAN connections with load-balancing
4) Easy-to-use web inferface

Any suggestions? and why you chose yours.

share|improve this question
add comment

6 Answers

up vote 13 down vote accepted

PFsense is easier solution for you. you may want to check monowall, ipfire (ipcop with 2.6 kernel) or untangle but all of them except pfsense has no web gui for multiwan setup. in fact most of them is not supporting multiwan solutions.

but pfsense has different options for multiwan. because multiwan is not an easy to setup. it has many restrictions on connection.
here is some sources

(Andrew, this thing is not allowing me to vote up or comment. that's why i wrote as new answer)

share|improve this answer
Ah yes, the joys of the reputation system... +1 for putting in more explanation than I had time for! –  Andrew May 19 '10 at 1:24
pfSense has no native web filtering solution, OpenDNS might do the job. –  Luis Ventura May 28 '10 at 2:54
With plugins. Squid & dansguardian can be installed easily with a few clicks. & all sort of url filter & blacklists like shalla can be applied via plugins. OpenDNS can be a problem when you have too many clients. it has limits to query which can exceeded so fast. –  risyasin May 28 '10 at 6:55
+1 Note, pfSense and M0n0wall are both FreeBSD based, which is not Linux. –  Chris S Feb 17 '11 at 1:49
add comment

pfSense is what I'm trialling at the moment, based on a similar question I had. It's FreeBSD based but seems to do everything we need (and I think it does everything you want). You can also look at things like Endian Firewall, SmoothWall, eBox Platform, etc.

share|improve this answer
add comment

Untangle is free and OSS, with premium subscriptions for load balancing and more robust web filtering - http://www.untangle.com - available on 14-day free trials.

Recommended top Content filter by Spiceworks community, too.

Disclaimer: I work for Untangle, so please try it out for yourself, don't take my word for it.

share|improve this answer
add comment

This sounds like a job for... IPCop!

Seriously, IPCop rawks. It has a massive array of plugins, is easier than falling off a log to use and it even runs off of a CD if you need it to.

share|improve this answer
add comment

I am not 100% sure about the load balancing, but as a standalone nix solution. I am really like the Endian Community Firewall.


share|improve this answer
add comment

I'd suggest m0n0wall, which is not Linux based, but BSD comes close to it, I think.

I myself use OpenBSD, but m0m0wall is what I suggest for users that need quick setup and a nice interface.

share|improve this answer
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.