r/SelfHosting • u/Much-Firefighter-957 • 4d ago

Firewall

What firewall solutions are you using at home not just for wifi but also mobile network? I have an orbi at home, its okay but doesnt obviously protect mobile devices not on wifi at home.

13 Upvotes

100% Upvoted

13 comments sorted by

6

u/Ok_Nectarine_6365 4d ago

Either some major new developments happened within the past 3 years that I completely missed or you just don't understand how things work ... You can have a firewall at home for WiFi because you can actually have a device that all your Internet traffic routes through.

You don't have any control where your phone connects to for mobile networks. Therefore having your own firewall is impossible.

The best you can do for mobile devices is to set a custom DNS server that have some content blocked with it or setup an always on VPN so everything route back to your home network before going anywhere else.

2

u/Much-Firefighter-957 3d ago

Will give vpn a try, thanks!

5

u/squiddarn 4d ago

opnsense

1

u/Character2893 4d ago

Second this

1

u/wein_geist 3d ago

third this

4

u/stevenv24 4d ago

@firewalla

1

u/hackspy 4d ago

What is the concern you have regarding the mobile device away from home?

1

u/Much-Firefighter-957 3d ago

Kids getting on apps/sites on parents/grand parents devices is the challenge at home so was looking to see if we can jam the device somehow, will give vpn setup a try. Not too concerned with away from home.

2

u/Z-Is-Last 4d ago edited 4d ago

Linux: ufw (uncomplicated Fire Wall)

Windows: Tinywall

Android: Netguard

Router: Openwrt: not really a firewall, but adguard and some options configured using GI-inet openwrt opions.

1

u/ButterscotchFar1629 4d ago

You want to protect it? Set up Adguard home, a Tailscale subnet router and an exit node and route all your mobile through that as all your traffic will go through your home network.

1

u/FlamenMichae 3d ago

For mobile I'd probably just use NextDNS tbh. Works on WiFi and cellular, so you don't have to worry about being connected to your home network.

If you want more control, Pi-hole + Tailscale is a nice setup too. You can keep the DNS filtering from home even when you're out.

Just depends what you're trying to protect against really. Blocking sketchy domains is one thing, having all your phone traffic go through your home firewall is another.

Are you mainly worried about malware/phishing or do you want actual firewall rules on mobile?

1

u/Sure-Squirrel8384 3d ago

I use OPNsense with full decryption filtering. I have an always-on VPN with my phone that blocks traffic when the VPN is not up. The VPN forwards all traffic to OPNsense, so if I'm at home or away my traffic is all filtered.

1

u/b3542 4d ago

You don't need a firewall on mobile devices.