Firewalls

>>59709654
If possible, free is always nice.

Tinywall

>>59709654
Common Sense.

>software firewall
lel

Windows Firewall is fine, if you need more you need a hardware firewall anyways

>>59709654
You should be as worried about traffic leaving your system as you are about traffic entering your system
>software based firewall
Lol. Grab an old computer, grab a quick nic, throw pfsense on it. Much more effective m8.
>believing a compromised os can be trusted to run a firewall.

>>59711454
>>59711829

The one major thing I'm worrying about is that if someone somehow manages to infect my server, the people I live with can get infected too. That's why I'm sort of being paranoid

>>59709654
Raspberry Pi + ip tables. God tier.

>>59712273
This plus pihole.

Get a hardware FW. All software ones are garbage and easy to bypass.

>>59709654
Make sure not to put your server in the DMZ. Use port forwarding on your gateway and only forward the ports that you need.

>>59712273
>not using nftables
It's like you are a masochist

>>59709654
Dedicated UTM device on your edge, everything else is placebo.

>>59712626
Why use nftables when iptables is perfect? Unless you're retarded

>>59709654
Use pfsense, or ipfire if you need something simple.