Comment on [deleted]

eth0slash0@lemmy.world ⁨11⁩ ⁨months⁩ ago

• Dust0741@lemmy.world ⁨11⁩ ⁨months⁩ ago

  I guess I’m not 100% sure. Which would I need/which would increase security?

  source

  • SheeEttin@lemmy.world ⁨11⁩ ⁨months⁩ ago

    If your goal is network security, you’d probably be best off deploying something like Security Onion.

    After the basics like having a firewall, making sure you have the strongest wireless encryption your devices support (WPA3 probably, WPA2 if 3 isn’t supported), stuff like that.

    source

    • Dust0741@lemmy.world ⁨11⁩ ⁨months⁩ ago

      Okay this seems neat. Would this be usable for a home network?

      source
  • eth0slash0@lemmy.world ⁨11⁩ ⁨months⁩ ago

    It sounds like you’re looking for intrusion detection or prevention rather than antivirus.

    Great list here github.com/sbilly/awesome-security#ids--ips--host…

    However it’s likely that these do not run on asuswrt-merlin out of the box and may require additional setup.

    You may even be good enough by using the built in firewall on the router interface and making sure no ports are open/forwarded.

    source

    • Dust0741@lemmy.world ⁨11⁩ ⁨months⁩ ago

      Yea I think intrusion detection is what I want. I’ll have a look at that page, but I may end up just going with pfsense one day.

      source
  • bookworm@feddit.de ⁨11⁩ ⁨months⁩ ago

    ClamAV is an anti-virus software that you would run on end-devices, an intrusion detection scans network traffic to detect anything potentially malicious. I don’t know your exact router model but I suspect it’s way too weak to run intrusion detection. If you have a switch that’s capable of mirroring you could use that to utilize a more powerful machine to scan network traffic.

    source

    • Dust0741@lemmy.world ⁨11⁩ ⁨months⁩ ago

      Ah gotcha. Makes sense. Would something like WatchYourLAN or Pi.Alert be good?

      source

      • bookworm@feddit.de ⁨11⁩ ⁨months⁩ ago

        It’s a good way to see if someone has cracked your WiFi password so why not. Doesn’t add much security but better than nothing.

        source
  • RegalPotoo@lemmy.world ⁨11⁩ ⁨months⁩ ago

    What do you mean by “increase security”? Security isn’t a thing where you get +5 points for every antivirus you have installed - it’s about risks, and how you mitigate them. A perfect antivirus isn’t going to protect you if you have a crappy password on something you forgot about, or if you are running software with a serious security vulnerability.

    source