Paul Begley

Test for DNS and Cloudflare updates.

This post is to confirm a connection to the NEW web site.

This is a test post.

Testing IONOS hosted WordPress.
This is only a test.

This is a test post after updating the server, changing the theme, and updating WordPress configuration.

I recommend you keep your Windows OS patched and be sure to update all the software you use. I run Windows Defender for antivirus and malware in conjunction with securing my browser and using a DNS that filters malicious sites.

I don’t recommend third party security/network software. If you feel better running a third party product, stick with something like Bitdefender,

I also recommend running ‘beta’ releases for the major browsers (links below) and use a public DNS service that filters malware. I typically use Cloudflare, Quad9, and Hope this helps.

Beta links for Chrome, Edge, and Firefox
Google Chrome Beta
https://www.google.com/chrome/beta/
Microsoft Edge Beta
https://www.microsoft.com/en-us/edge/download/insider?form=MA13FJ
Mozilla Firefox Beta
https://www.mozilla.org/en-US/firefox/channel/desktop/

Quad9 DNS
https://quad9.net/

Cloudflare 1.1.1.1
Speed up your online experience with Cloudflare public DNS resolver.
https://developers.cloudflare.com/1.1.1.1

OpenDNS
DNS SERVICES FOR YOUR HOME OR SMALL BUSINESS.
https://www.opendns.com/home-internet-security/

OpenDNS
Free for: Personal or business use for Enhanced DNS; personal use only for other home and family services

DNS addresses: 208.67.222.222 and 208.67.220.220 

“FamilyShield” DNS addresses: 208.67.222.123 and 208.67.220.123

With more people streaming and general Internet use increasing, I get questions about measuring home Internet performance.  I recommend using the three sites listed below.  I have them in the order I prefer and have comments regarding each site.

Cloudflare – more technical detail and appears very accurate, no ads.

Netflix – change settings to enable more technical detail and save your configuration, very accurate, and no ads.

Ookla – similar accuracy as Cloudflare and Netflix, but less technical detail and *littered* with ads.

Cloudflare Speed Test
https://speed.cloudflare.com/

Netflix Speed test
https://fast.com/

Ookla Speed test
https://www.speedtest.net/

Friends and family have asked about antivirus and security recommendations. This is a quick summary of my best practices to keep your desktop or laptop secure.

Keep your system updated. Set Windows Update to run automatically or manually run it weekly. Pay attention to Microsoft Patch Tuesday.

Antivirus – I recommend using Microsoft Defender. There are others, but the consumer version of Defender is solid, it is less likely to impact other programs, it doesn’t impact performance, and combined with other safe computing practices is a solid antivirus/malware solution.

Browsers – Edge, Chrome, Firefox, all are secure. I recommend installing the beta channels for all browsers. They have proven to be very stable, and you avoid ‘day zero’ exploits.

Browser add-ons – install an ad blocker. Don’t think twice. Install an ad blocker, and make sure it’s uBlock Origin, the one with this logo:

I avoid frequent changes to my home network. My stated goal is to design and install a reliable, secure network and keep it updated, but otherwise leave it alone. About five years ago, I took advantage of a Cisco program for free Meraki software for completing a professional certification class and exam. Now the program has expired, and I needed to replace the MX64 security appliance.

Moving from a commercial security device to a consumer product, I wanted to get something simple, but flexible. I’ve always been interested in open-source products, and considered ‘rolling my own’ firewall, but finding cost effective, silent (fanless) computer with multiple gig Ethernet ports in the current (Nov 2022) market was a challenge. Also, there’s still a huge supply chain issue that I expect through 2023 and I don’t want to buy from China. Not a nationalist issue, but I don’t trust security appliances from China (https://www.dhs.gov/news/2020/12/22/dhs-warns-american-businesses-about-data-services-and-equipment-firms-linked-chinese).

Selection Process

Super simple – I looked at consumer products and found they weren’t flexible enough for my use, some products were discontinued, others are on back order. I wanted to spend under $300 and narrowed the search to Ubiquiti Networks and Netgate (pfSense). Ubiquiti availability was an issue, and Netgate was less expensive, so I went with the entry level Netgate 1100.

Although the GUI lagged during the installation, subsequent configuration changes and overall performance of the device has been good. I’ve updated the default configuration by disabling IPv6, not using VPN or packet inspection, using PiHole on a spare Raspberry Pi instead of using Netgate services.

I would call this a ‘prosumer’ product – you can’t install and use this product without reading the manual and understanding the basics of TCP/IP networking. However, it’s much more flexible than the average consumer product and using pfSense open-source software provides greater security and longer support life (IMHO).

Performance

Performance is equivalent to the Meraki MX64. We have >20 devices on our home network including three Roku devices streaming 1080p (not 4K). If you plan to implement low level security, ad blocking, and other features, consider the 2100 model.

Recommendation

• Pros
  • Good security appliance for home networks with under 500 Mbps Internet service
  • Simple installation and silent operation
  • Better security and longevity than consumer products at this price point.
  • Performance is good
• Cons
  • Install is not just “click next” – you need to read the manual!
  • Lots of online chatter about performance issues using third party packages

Home Network

Netgate running statistics

Internet speed
Comcast – 300 Mbps download, 12 Mbps upload