You won't believe how UNSAFE your home router is!

Ғылым және технология

Out now NBTV’s new Ebook - Beginner’s Introduction to Privacy - available at:
amzn.to/3hCGEmk
Your router is the gateway between your devices and the internet at large. If it’s compromised, it’s like leaving the front door to your home network wide open, allowing malicious actors to enter. Unfortunately the routers most of us use are VERY insecure, with all kinds of known vulnerabilities.
In this video we go over how to give your hardware and software a major overhaul, including a step-by-step tutorial for how to use pfSense on a Protectli firewall vault.
00:00 Intro
01:07 What’s in a “Router”?
03:30 Security Dangers
06:06 Upgrading with Protectli
06:43 Protectli Components Explained
07:50 Installation Tutorial
09:39 Configuring pfSense Settings
13:45 Power Cycling Tip
14:12 How Protectli Fits into Your Network Setup
15:57 Add WiFi Capabilities
16:36 How to Enable AP Mode
18:34 Setup Diagram
20:07 Conclusion
With pfSense and the Protectli vault, you can tweak your settings to incredibly granular levels. That's what we'll cover in future videos: how to configuring firewalls to block malicious traffic coming in AND telemetry going out, and how to set up a whole network VPN.
Video 2 in our home networking series:
• You NEED to learn abou...
Video 3 in our home networking series:
coming soon!
Brought to you by NBTV members: Lee Rennie, Reuben Yap, Sam Ettaro, Will Sandoval, and Naomi Brockwell.
This video was not sponsored by anyone.
Protectli Hardware:
protectli.com/
pfSense Download:
www.pfsense.org/
Network Chuck's video on IP addresses:
• what is an IP Address?...
Privacy book mentioned (this is an affiliate link and helps support our channel)
Extreme Privacy - Michael Bazzel
amzn.to/3BLZ1gq
To support NBTV, visit www.nbtv.media/support
(tax-deductible in the US)
Sign up for the free CryptoBeat newsletter here:
cryptobeat.substack.com/
Beware of scammers, I will never give you a phone number or reach out to you with investment advice. I do not give investment advice.
Visit the NBTV website:
nbtv.media
Watch this video on Odysee!
open.lbry.com/@NaomiBrockwell...
________________________________________________________________________
Here are a bunch of products I like and use. Using these links helps support the channel and future videos!
Recommended Books:
Permanent Record - Edward Snowden
amzn.to/305negc
No Place to Hide: Edward Snowden, the NSA, and the U.S. Surveillance State - Glenn Greenwald
amzn.to/2UQmJ4m
What has the government done to our money - Rothbard
amzn.to/2KMzmcu
Extreme Privacy - Michael Bazzel
amzn.to/3BLZ1gq
Naomi's Privacy Bag: some of my favorite products to help protect your privacy!
Use the Brave browser! brave.com/nao076
USB-C to ethernet adapter:
amzn.to/2lOVBoy
Faraday bag (signal stopping, to protect your fob, credit card, computer, and phone)
amzn.to/3DjIvCP
Data Blocker (if you're charging your phone in an unknown port, use this so that no data is transferred)
amzn.to/2SVh0J2
Computer privacy screen (use your computer in public? Keep your information safe! Choose the size right for your computer)
amzn.to/3F816Sn
Phone privacy screen (don't let people in public see your private data, choose the size for your phone)
amzn.to/3wNtYwb
Camera cover (for computers and phones, so no one can access your camera without you knowing)
amzn.to/2Mt7Hic
Privacy Tip: Turn off your wifi and bluetooth when you're not using them!!!

Пікірлер: 824

  • @pcdoc1097
    @pcdoc10973 ай бұрын

    I've been using PFSense on a surplus dual-core PC I bought for $10 coupled with an Apple Time Capsule in AP mode and a cable modem since 2015, and have never looked back. So far this combo seems more bullet proof than most consumer routers for a fraction of the cost and headache :) - Thank you for this wonderful video tutorial :)

  • @natemarx4999
    @natemarx4999 Жыл бұрын

    Naomi is a modern day super hero.

  • @JRis44

    @JRis44

    10 ай бұрын

    lol pretty much. Need a wife like this. This woman is impressive.

  • @richardblais7445

    @richardblais7445

    6 ай бұрын

    I agree

  • @5thpixel

    @5thpixel

    6 ай бұрын

    Facts

  • @rancidbeef582
    @rancidbeef582 Жыл бұрын

    I've been using pfSense for years. It's great stuff. It can handle everything from simple home use, to advanced features like VPNs, VLANs, failover (high availability), multiple WANs, Let's Encrypt certificate updating, reverse proxy, ad blocking, and more. And in spite of what the guy said, the latest pfSense can be very resilient to being unplugged without shutting down because the latest version can use the ZFS filesystem which is awesome. Although I still don't recommend doing it 🙂

  • @dougchittum6074
    @dougchittum6074 Жыл бұрын

    You and NetworkChuck are excellent at this! You both cover SO MANY GREAT topics here. Looking forward to the continuation of this topic!

  • @fourtwanky

    @fourtwanky

    Жыл бұрын

    I can't stand watching NetworkChuck. He's way too annoying.

  • @Husky4848

    @Husky4848

    Жыл бұрын

    @@fourtwanky Cant understand? LOL. go back to school then. The topics he cover as much more diverse and accurate compared to this privacy freak.

  • @Husky4848

    @Husky4848

    Жыл бұрын

    @@marco31 Get over yourself

  • @DavidM2002

    @DavidM2002

    Жыл бұрын

    @@fourtwanky I would have said that in ALL CAPS but you beat me to it. Put the campy humour back in the closet Chuck.

  • @ninjarider443

    @ninjarider443

    11 ай бұрын

    100% agree - this is awesome content to get folks educated about home network protection. Also, make sure to research the manufacture, many devices (especially the cheaper ones) are made in china. When you buy a firewall try not to get one flashed in china, but look at hardware that has coreboot on it and toss on ipfire (easy) or pfsense (more complicated).

  • @oscarcastro211
    @oscarcastro211 Жыл бұрын

    I am a new subscriber to your channel, Naomi. Please, do know that your work here is a very noble one. Don't ever stop making your content, please. You explain what big companies don't want us to know. Regards from Honduras ❤

  • @Jennn
    @Jennn Жыл бұрын

    Goodness I just love it when y'all creators make your own skits and don't shove stock footage at us, plus you even included a full tutorial in this video x.x Amazing.

  • @reeleyezmusic222
    @reeleyezmusic222 Жыл бұрын

    Naomi, this channel is impeccable. The fact that you have anything less than a kajillion subscribers perplexes me beyond verbal expression 🤷‍♂️

  • @garymichael8591

    @garymichael8591

    Жыл бұрын

    Shuuushhh she is ours.Lose lips sink ships.

  • @reeleyezmusic222

    @reeleyezmusic222

    Жыл бұрын

    @@garymichael8591 💯

  • @TSPhotoAtlanta

    @TSPhotoAtlanta

    2 ай бұрын

    @@garymichael8591 don’t’lose’ your lips!

  • @TheLazyJAK
    @TheLazyJAK Жыл бұрын

    All of your videos are so thorough. Keep it up!

  • @troyBORG
    @troyBORG Жыл бұрын

    Literally everything you described this video I've been doing for like 6yrs now. Recently I did upgraded to a dedicated AP instead of using my old router.

  • @majorhavoc9693

    @majorhavoc9693

    4 ай бұрын

    Literally!

  • @healthfullivingify
    @healthfullivingify3 ай бұрын

    This video is great, Naomi. What a wonderful explanation and tutorial on Protectli and internet security.

  • @juanmondragon
    @juanmondragon Жыл бұрын

    Dang Naomi, you really did your research and applied it well on this video! I'm impressed and thank you! You just gained a follower.

  • @tableB
    @tableB9 ай бұрын

    Hi Naomi, great series. Just invested in a Protectli/Pfsense project. Looking forward to putting it all in place. Thank you!😊

  • @Robert-sj8ld
    @Robert-sj8ld Жыл бұрын

    Naomi...I love your channel. Very very informative in a way that I can understand. Thank you so much👍

  • @mtnsolutions
    @mtnsolutions Жыл бұрын

    Instead of explaining to folks what I’ve been learning as I train as a CCNA, I’ll just point them to this video. Very informative and condensed. Love it

  • @deang5622

    @deang5622

    Жыл бұрын

    So you think Joe Public is going to learn CCNA? Yeah, good luck with that mate.

  • @mtnsolutions

    @mtnsolutions

    Жыл бұрын

    @@deang5622 no way to get that kind of learning boiled down to a 20 minute video, but this one will give just a taste of the basics and paint a picture of the scope of CCNA without much of the details. forest vs trees, this vid is forest

  • @fennno3

    @fennno3

    3 ай бұрын

    @@deang5622 way to be a negative nancy :p

  • @gusgusnft8231
    @gusgusnft8231 Жыл бұрын

    Awesome information. This is something I’ve been looking to do for my home network. Thank you.

  • @JesterHammer
    @JesterHammer4 ай бұрын

    Made the jump on pfSense years ago and throw away my asus router. The best move I ever made. Btw, I wrote the first sentence before I even knew this video was about to introduce it :). This video is the best introduction to the topic and transition to pfSense I have seen. Will share it with all my friends! Thanks

  • @MakeitZUPER
    @MakeitZUPER11 ай бұрын

    You're the best !!! I have been looking for this exact information to protect and isolate my information and devices. I'm looking forward to the other videos to isolate my home theater, so they function without collecting my data. I hope this all works out but I'm very concerned that if it doesn't, I won't be able to go online for assistance anymore. The last portion of this video seemed rushed and I hope I can download it for future reference if my system fails. If any one of these components stops working, I will be lost, lol. Thank you for everything you do to help make the world a safer place.

  • @johnsmuzic
    @johnsmuzic5 ай бұрын

    WOW!!, Beautiful inside and out!! for what its worth my family and friends appreciate what you do. THANK YOU!! GOD BLESS.

  • @martyn6792
    @martyn6792 Жыл бұрын

    My day job is IT and this is a superbly put together video with excellent explanations and walk throughs. Protectli looks an interesting product

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    Thanks for watching!

  • @cont8155

    @cont8155

    Жыл бұрын

    APU2 is better Protectli most likely has a chinese backdoor

  • @martyn6792

    @martyn6792

    Жыл бұрын

    @@cont8155 Interesting thought, where is protectli made ?

  • @cont8155

    @cont8155

    Жыл бұрын

    @@martyn6792 its a chinese product, youre better off getting a prebuilt router from teklager (sweden) or parts (taiwan) from pc engines (usa/switzlerland) to build a router yourself. another option is to buy from netgate (official products from pfsense) if ur using pfsense instead of opnsense

  • @Morggin

    @Morggin

    Жыл бұрын

    @@cont8155 that's ridiculous and unfounded. It's like suggesting a raspberry pi has a chinese backdoor. When in reality almost all electornics are now made in China. All they provide is hardware, YOU put the your own firmware and OS on it. Any back door is going to be in the firmware you install.

  • @arunkhan4951
    @arunkhan4951 Жыл бұрын

    A great video. I loved the first part explaining in lay person terms on how everything is glued together to make a home network work!😅

  • @realgreglolxd
    @realgreglolxd28 күн бұрын

    first time i see your channel, i am a student in IT and found your video very educational and clear, keep up the good work

  • @l0gic23
    @l0gic232 ай бұрын

    Thanks for putting these in a playlist

  • @MrCharlieTech5
    @MrCharlieTech5 Жыл бұрын

    Thank you for packing so much information at a fantastically easy to understand video

  • @heitormbonfim
    @heitormbonfim Жыл бұрын

    Thanks for putting thought and action resulting in the common good.

  • @ManInTheAttic57
    @ManInTheAttic57 Жыл бұрын

    Great video - very well presented and informative!

  • @ootmllk608
    @ootmllk6089 ай бұрын

    Thank you for making this. Looking forward to watching the next episode.

  • @DrElectron1
    @DrElectron15 ай бұрын

    I work as an IT consultant. This was a very good video. Accurate and clearly presented.

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    5 ай бұрын

    I really appreciate that!

  • @PongoXBongo

    @PongoXBongo

    4 ай бұрын

    Indeed. They're basically breaking down a standard business setup into something that individuals can implement at home.

  • @pedzsan

    @pedzsan

    3 ай бұрын

    I was just about to put the same comment. Did networking support for Big Corp for over a decade. I didn’t see a single misstep. The added bit about Apple’s self assigned IP demonstrates that the video was well thought out. She probably actually saw that happened and either understood why or found out why. Good job!

  • @xila8861
    @xila8861 Жыл бұрын

    I am glad I subscribed to your channel. The subjects and the production of this channel are fantastic.

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    Thank you very much!

  • @xila8861

    @xila8861

    Жыл бұрын

    @@NaomiBrockwellTV No, thank you ❤❤❤

  • @emorysmith197
    @emorysmith19711 ай бұрын

    This is incredible!! Absolutely well done! Will be learning more about all this technology

  • @tinetannies4637
    @tinetannies463710 ай бұрын

    Just discovered this channel. It's awesome!

  • @dcquence
    @dcquence2 ай бұрын

    I switched to Opnsense on a tiny x86 PC with 4x2.5Gb ports and absolutely love it

  • @ronm6585
    @ronm6585 Жыл бұрын

    Excellent information. Thank you.

  • @KDOERAK
    @KDOERAK Жыл бұрын

    great content: short and clear explanation 👍

  • @ganeryhyperion8386
    @ganeryhyperion8386 Жыл бұрын

    what i like on pfsense is the migration from device to other device , you can back up near all the setting on it.

  • @60souravsingh61
    @60souravsingh61 Жыл бұрын

    Happy to see you again and thanks 🥰

  • @itsrenatoc
    @itsrenatoc4 ай бұрын

    Excellent episode. Thanks!!

  • @777Nardo
    @777Nardo Жыл бұрын

    Awesome video! Time to upgrade!

  • @DodZz666
    @DodZz666 Жыл бұрын

    I love these videos , exactly what I was looking for

  • @kerninn
    @kerninn Жыл бұрын

    I wasJUST watching your video on VoIP and was wondering about making home internet connection secured. Taking notes and waiting for the next video about segmenting network :D

  • @JohnSmithIam
    @JohnSmithIam Жыл бұрын

    Thank you @Naomi, I just set my system to your advice here and I'm up and running!

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    Nice! Let me know how you like it!

  • @DiamondStumpy
    @DiamondStumpy11 ай бұрын

    I'm spankin New to Cybersecurity,.... this is Beyond HELPFULLLLLLLLLLLLLL!!!

  • @TracyWeber-ko9oe
    @TracyWeber-ko9oeАй бұрын

    Just found your channel love your videos already they are educational and very informative thank you ❤

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Ай бұрын

    Welcome!

  • @endthefed9937
    @endthefed9937 Жыл бұрын

    Thanks for another great video!

  • @MuneeshKumar
    @MuneeshKumar Жыл бұрын

    Well explained video. Thanks.

  • @csantolla
    @csantolla3 ай бұрын

    Excellent video. Thank you.

  • @Steven_nevetS
    @Steven_nevetS Жыл бұрын

    Now this is very very good information!! Thanks Naomi. You rock

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    Thanks for watching!

  • @Armmani2000
    @Armmani2000 Жыл бұрын

    Excellent guide Naomi, that's exactly what I have done, except I used an old PC with 2 network cards for installing pfSense.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    And what does that cost in electricity a year?

  • @Armmani2000

    @Armmani2000

    Жыл бұрын

    @@LilRedDog I am not sure, I should actually find out! I think it has an 80 watt power supply.

  • @nevecatalani8721
    @nevecatalani8721 Жыл бұрын

    Love your work Brockwell.

  • @michaelscheftic8892
    @michaelscheftic88928 ай бұрын

    This is GREAT Info. Seems too complicated for a non techy like me

  • @mattd5136
    @mattd5136 Жыл бұрын

    Kudos for using a Netgear router as the example - they've been atrocious for face-palmingly dumb WAN-side auth attacks; not all of which they fix on older models. Although brickbats (just little ones) for running a Netgear Nighthawk of some kind (a r7xxx series?) that's quite possibly capable of being flashed to one of the flavours of open source firmwares (DD-WRT, Open-WRT, Tomato) that means you get all the function of pfSense PLUS working WiFi AND more frequent updates without needing another hardware device to purchase and power. There's precious little difference between learning pfSense and learning *WRT. Although there is a very slim but not-entirely-zero chance you brick the router flashing it.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    Actyally: Open-WRT does not like the chipset in the R7000. So it is 2.4Ghz only with that firmware.

  • @mattd5136

    @mattd5136

    Жыл бұрын

    @@LilRedDog fair enough. I run one and it's bigger 8000 & 9000 brothers on DD-WRT where 5ghz works great. I've only used Open-WRT on Ubiquity gear to unlock radio restrictions. Open source firmware is still a great way of re-purposing an older router where the original manufacturer has officially or effectively abandoned it ... or simply crippled it with a rubbish firmware in the first place 🙄

  • @mouaztabboush5571
    @mouaztabboush5571 Жыл бұрын

    Thank you for the great content ❤️

  • @earbjr4715
    @earbjr4715 Жыл бұрын

    It's nice to learn this info from you.

  • @sea_bass21
    @sea_bass21Күн бұрын

    9:22 Press spacebar to select the Protectli Vault. Took me a while to figure this out.

  • @hhbadarin
    @hhbadarin Жыл бұрын

    This is awesome, thank you!

  • @nully.emptier
    @nully.emptier Жыл бұрын

    omg... I have similar device! Another great straithforward video... thumb up!

  • @inujoshwa89
    @inujoshwa89 Жыл бұрын

    How come I haven't seen you until now.....such a pretty unsung hero ❤️

  • @joepoptiya
    @joepoptiya Жыл бұрын

    Thanks you Naomi. This is really great guidance. Is this a series with additional videos coming?

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    Yep!

  • @CapsLock33
    @CapsLock33 Жыл бұрын

    You guys make learning easy and fun. Please make more.

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    Thank you so much!

  • @peterk6797
    @peterk67979 ай бұрын

    My biggest issue with ISPs these days is how they are forcing everyone onto using their all in one modem+router combo. The first issue I have with that is I want to choose my own premium router that suits my needs, with a gaming router with 4k support and dedicated 4k optimized networks, and having 8 ethernet ports (wired connections are faster, especially when living in a condo or apartment where you are drowning in other peoples wireless signals). I've been reading about how to use Bridge mode but according to some forums online, the ISPs don't want you doing this and its either not supported in their routers or your system doesn't work properly. I hope this isn't accurate but it had prevented me from migrating to these providers in general.

  • @cyberwasp461

    @cyberwasp461

    6 ай бұрын

    if you need more ports just get a switch. Easy to setup and they have ones from 8 up to 32 ports or more. Everything I have is hardwired.

  • @JacobNintendoNerd99

    @JacobNintendoNerd99

    5 ай бұрын

    ​​@@cyberwasp461more ports won't help when the router's internal hardware itself is crap. It's good to have more ports and hardwire everything, but the router hardware itself being good is essential.

  • @jazzcat9363

    @jazzcat9363

    4 ай бұрын

    Yes, all-in-ones from the ISP are completely garbage. I went from 25-50Mbps using the all-in-one to anywhere between 150-200Mbps using my Asus router. Like you, I couldn't find a "bridge mode" in my modem settings, but I did find "IP Passthrough" which is kind of the same thing. They do work differently and affect connection speed, but the end result is still basically the same and I doubt you would end up noticing a difference.

  • @bobchambers1455
    @bobchambers14559 ай бұрын

    Naomi is super intelligent, her videos are always very well made and packed with very useful information....and she gorgeous on top of all that!

  • @JustinT1010
    @JustinT1010 Жыл бұрын

    Naomi, you’re making me want to get a Protectli now 👏

  • @wheelieblind

    @wheelieblind

    Жыл бұрын

    If I got one of those things I would not know how to set it up even after watching the video... also I know Tom Baker the 4th Doctor, and when I called him on the phone he answered, I think he still lives in the same house he was living in back in the 20th century.

  • @Geniusclicks
    @Geniusclicks Жыл бұрын

    Fantastic content!!!!!!!

  • @jozsefizsak
    @jozsefizsak Жыл бұрын

    This is very helpful.

  • @greylady4560
    @greylady45603 ай бұрын

    I love your videos and often find myself going down the KZread rabbit hole watching them. I am always delighted when you recommend something that I am already using. However, I have two questions. First, who do I turn to when something doesn't work as expected? Before I retired, I could go to the IT person at work and ask questions. They wouldn't always have the answers, but sometimes they would. Now, I am at a loss as to whom to ask. Second, I currently have one of those 5-in-1 routers from my ISP provider. I will probably have to buy my own router, as I did years ago. I've been breaking and fixing my computers since 2001, following videos and blogs. I once created a brick router and had to reinstall Windows when I attempted to follow directions for changing the registry. Learning processes are filled with mistakes, and I've gained a lot by researching my snafus. Sometimes, though, I've had to give up when I couldn't find the information I needed. Having an easy-to-access place where I can ask questions would be awesome. Thank you so much for providing these videos.

  • @giux900
    @giux900 Жыл бұрын

    Thats cool video, i run very similar network config. Waiting for pfsense tips on next video, thanks.

  • @Placesandspaces35
    @Placesandspaces35 Жыл бұрын

    That’s why i love Merlin Firmware for ASUS routers. You can run Skynet additional firewall, Diversion. AI Protection from Trend Micro etc and it now has Wireguard server protocol available now.

  • @IT_RUN1
    @IT_RUN1 Жыл бұрын

    Got the Vilfo VPN router. They're roadmap shows a lot of transparency in my opinion. And it seems like they do update more regularly than any vendor I've seen. As far as security, I haven't gotten hit once since installation in November 2022 thanks to their software based built-in VPN server(separate from whomever your VPN provider is as it supports multiple providers). They do allow you to but do not recommend opening the remote WAN which was the case for my old ISP router that caused my Synology NAS to get hit with over 10,000 attempts via bots or hackers from 2014 to November 2022 which were recorded by its auto block feature.

  • @JoeHairsprayBand
    @JoeHairsprayBand25 күн бұрын

    So be a consumer, constantly buy new products, spend every waking moment monitoring our tech products…got it… I can’t be alone in realizing my life was far happier and society was more open and at peace before smartphones and wi fi

  • @corrompido7680
    @corrompido7680 Жыл бұрын

    love your videos, they make me wanna return to learn cybersecurity

  • @chrisabell2782
    @chrisabell2782 Жыл бұрын

    Great video, one that everyone should see to understand the basic home network protections. Looking forward to the rest of the series

  • @prunn
    @prunn Жыл бұрын

    13:46 power tip: plug the vault into a UPS then, I see they have a UPS addon, but it wont send a shutdown signal for prolonged power cuts, the one with usb ports paired with a normal one might do it

  • @level7041
    @level7041 Жыл бұрын

    I have a peplink router. It’s probably the most secure router out there. Great video btw!

  • @VulcanOnWheels
    @VulcanOnWheels Жыл бұрын

    12:43 Chuck is informative, but he's always so tense!

  • @jmtx.
    @jmtx. Жыл бұрын

    Thanks for a very informative video on security, and what options are out there for us to be safer!

  • @jr4062
    @jr4062 Жыл бұрын

    The router, like hellblazer, is gateway between earth and hell. Great video, the Naomi twins have done it again.

  • @MichaelAmen316
    @MichaelAmen316 Жыл бұрын

    I appreciate that she pronounces it router instead of rooter. LOL. Love Naomi's videos and she is a hot nerd... even better! LOL! ❤

  • @Whiskeyshotglass
    @Whiskeyshotglass Жыл бұрын

    Please make a video on the Firewalla.

  • @IBM_Museum
    @IBM_Museum Жыл бұрын

    Great video! I started on pfSense about seven or eight years ago and loaded it on a dual PIII server that I had added two dual gigabit NICs (64-bit PCI) - years later, I ported that configuration to a four-port Protectli mini-PC as shown. But that unit is now at my mom's house, as I have upgraded to a six-port Protectli at home. What amazes me is that I planned my network configuration so well that I haven't changed it much over the years. I look forward to more follow-up videos - I split the remaining interfaces other than the LAN and WAN to be my DMZ network and an "ADMIN" network. The LAN and ADMIN VLANs are trunked from my main managed switch to peripheral switches that can only be managed through the ADMIN network (only on a few systems I run). Of course, the ADMIN network has no wireless access points and is locked down in DHCP assignment. IoT and "guest" wireless are on the DMZ network. I like pfSense for being easy to move between devices too as upgrades are made...

  • @diddy_dante

    @diddy_dante

    Жыл бұрын

    Wouldn't it make more sense for the IoT stuff to be put on a different VLAN but not on the DMZ? Considering the security in IoT devices, it doesn't make sense to me to open them up to public like that.

  • @IBM_Museum

    @IBM_Museum

    Жыл бұрын

    @@diddy_dante: My IoT devices are actually locked down to where they only need to contact - I used Wireshark to figure out the minimum needed (i.e. Honeywell thermostat only allowed to communicate with Honeywell servers. The security camera DVR is also locked down to not give any traffic to the outside world.

  • @diddy_dante

    @diddy_dante

    Жыл бұрын

    @@IBM_Museum ah ok that seems good then

  • @lyfandeth
    @lyfandeth Жыл бұрын

    Broadband suppliers in the US can require modemrouters (integral) that are custom made for/by them. That usually means the actual customer is locked out of the update process and only the broadband supply can start updates. Which they have no interest in doing.

  • @hornblenda6
    @hornblenda63 ай бұрын

    Nice informative video. Also, love your texan southern accent! 😄

  • @Nagga99
    @Nagga99 Жыл бұрын

    Loving your content! Always topping up the knowledge! Are these routers available globally?

  • @stefaancodde6578

    @stefaancodde6578

    Жыл бұрын

    1Gbps router are the most routers but as soon to 20gbps or higher then the choice is very expensive.

  • @ksamos
    @ksamos Жыл бұрын

    Ubiquiti has been a very good product for us. A good way to classify it would be Cisco-like performance for a lot less money. No subscription costs. I see it being used in a lot of commercial settings these days and use it for my home and business. Easily configurable and expandable managed system with excellent firewall capabilities. Nothing is absolute out there, but Ubiquiti offers an enterprise system at a very competitive price point that works out of the box.

  • @petebraven1522
    @petebraven15223 ай бұрын

    Oh, one thing I've always got in my Internet connection (router etc) is a UPS backup, a battery backed up power supply in the event of a power cut. Also have one for computer supply. Costs half the amount of a desktop but waaaay less than losing data.

  • @AinzOoalG0wn
    @AinzOoalG0wn Жыл бұрын

    this video was much more advance than i would have suspected. you mention stuff like pfsense, coreboot bios and other technical tips. only thing you missed was pfblocker but this is still pretty good for newbies that need to know the basics. can tell you put in the research and effort into this video. kudos :]

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    pf blocker is the 3rd video in this series, hasn't been release yet :)

  • @tawheed313
    @tawheed313 Жыл бұрын

    *Princess Naomi* : The RobinHood of Digital World. Much love and respect.. Thanks a bunch for educating us. Edit : 20mins worthy for being digitally secured.

  • @andymok7945
    @andymok7945 Жыл бұрын

    Lots of junk out there. Netgear make lots of good stuff, but the R7000 router had a DNS rebinding issue. Wat back when I used a 3 modem setup, I had to move the R7000 from the front unit to one of the two back units. I have been using pfSense for many years. First 4 years I used the Netgate SG-2440 and the unit still works as a secondary FW. For about 5 years now, I am using a 6 port Qotom brick PC and very happy with it. I have VLANS and a LAGG setup.

  • @user-zv3lj1ef7l
    @user-zv3lj1ef7l2 ай бұрын

    Accurate to the Tee, awesome content Naomi.

  • @fairycat
    @fairycat Жыл бұрын

    Thanks for review

  • @teknerd
    @teknerd Жыл бұрын

    Fantastic video Naomi and very well and professionally presented material. I love how quick and detailed your coverage of pfsense. Including the pro tips like literally unplugging and replugging the ethernet cable to get a new ip address. I am embarrassed that I never thought of just unplugging and replugging the cable lol. I would literally go into the command line or network settings to get a new ip, essentially the longer (dummy) method when I could have just did the trick you did. Can't wait for your upcoming videos on network segmentation.

  • @git-er-dun_LBK_

    @git-er-dun_LBK_

    Жыл бұрын

    I have Google mesh router with 3 AP's . The main Google Ap cannot be changed using conventional methods so I was wondering if there is a method to use pfSense and not current Google with the. I can configure the Google mesh router with a guest mode, that model well-made you have multiple guests for each peripheral I want to connect to the system I'm just fishing for some answers if you can help.

  • @slypig24
    @slypig24 Жыл бұрын

    Thanks, I've had to watch this episode twice to fully understand all the steps, I think I'm up for the challenge. I only wish I hadn't set a lot of my devices to a dedicated IP address, but I'm slowly changing them all to obtain there IP address automatically. Thanks for the great episode, looking forward to part two. Cheers from Australia 🇦🇺

  • @deang5622

    @deang5622

    Жыл бұрын

    All IP addresses on your internal network are dedicated. Once it has been assigned it can't be used by any other device in your network. You're getting mixed up, I suspect, on the difference between dynamically assigned and statically assigned IP addresses. Dynamically assigned is most often done by the DHCP protocol where your router acts as a DHCP server and issues IP addresses to the devices on the network. It's not true to suggest that DHCP dynamically assigned addressing is better than statically assigned addresses. Most companies use statically assigned addresses and there is a good reason for it. It begs the question, how did you end up with statically assigned addresses on your network if you don't know much about the subject?

  • @duroxkilo

    @duroxkilo

    4 ай бұрын

    @@deang5622 that's correct, from a security point of view the way the IPs are assigned for the LAN devices doesn't make much of a difference...maybe MAC filtering would make a difference (so that only MACs from a list can communicate w/ the router)?... imo these are just unnecessary complications for the home user (i'm not saying education is a waste of time). changing ('hiding') the router's LAN IP for example for security reasons takes more time to set up than for an attacker that's already connected to the LAN to detect. ppl need to realize that traffic outside their modems is monitored by the ISP for various reasons, traffic management being one since bandwidth is their greatest investment and they have no interest in sharing it for free, so it's not like the wild wild west outside the modems... and to prove my point, the vast majority of malware infections occur thru attachments (and links) followed by P2P shared material, both requiring the end user to click on a trap.. i use a dedicated firewall device and i'm yet to see sustained attempts of attacks or port probing in the logs going back decades...

  • @telocho
    @telocho5 ай бұрын

    I am someone involved with testing devices at an internet supplier, we use inhouse firmware and middleware, not the default supplier firmware. We focus on vulnerabilities, stability, functionality and energy ‘green’ compliancy as mandated in the EU and possibly elsewhere. We take energy complience serious, so your advice for adding devices consuming a few watts is a lot of unnessesary waisted power when implemented by plenty million subscribers. Do not add boxes to your home configuration if not absolutely necessary, better invest in a high regarded and safe all-in-one.

  • @DavidHathaway
    @DavidHathaway Жыл бұрын

    This is almost exactly my setup. I too use a Protectli and I love it. I upped my router game to a mesh router, but it too is in AP mode. And yes, I have a managed switch between the Protectli and the router, plus another at a mesh satellite because I need wired connections there. Based on the comments I have seen here, I hope you address Pi-Hole versus pfBlockerNG in your next video.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    I'll address it so she need not: Pi-hole with the Brave browser lets nothing through. I did add a custom list and block ~312,000 sites but even KZread loses with that combination.

  • @DavidHathaway

    @DavidHathaway

    Жыл бұрын

    @@LilRedDog have you tried pfBlockerNG? This does the same thing without needing an additional device. I have tried both and I am letting pfSense do the job. My Pi-hole was a fun project, but it is unnecessary if you already have a pfSense firewall.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    @@DavidHathaway No I have not. Technically I have one device and a Browser. But I could VM Pi-hole on something but I love my Pi zero2 too much. It is so cute taped to the router and using WiFi to talk to the network. Can it recursive DNS? I'm sure you can: asking for a friend.😆

  • @DavidHathaway

    @DavidHathaway

    Жыл бұрын

    @@LilRedDog I used my Pi zero (OG version) for Pi-Hole and loved the cute bugger. Worked well for sure. And cheap! But I just don't need it since getting the Protectli and using pfSense with the pfBlockerNG package. I also use the Snort package to detect weird network traffic. I'd like to put my IoT devices on a different VLAN but I haven't figured that out quite yet; the fault is mine not pfSense. Anyways.... I do need to figure out what to do with my Pi now.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    @@DavidHathaway Sell it on eBay for 3-10x what you paid for it, while you can!!!! I use my old one with a travel router; it is a hassle because it has no RTC and I have to set the date and time after 3 days of sitting. But I'm addicted.

  • @oceanwonders
    @oceanwonders Жыл бұрын

    This is way too hard even for people who are interested in privacy like me. I just don't have the bandwidth to take on a project like this. You're not gonna catch most people, but it doesn't mean this education isn't worth doing.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    "I just don't have the bandwidth to take on a project like this" I see what you did there...😇

  • @deang5622

    @deang5622

    Жыл бұрын

    It is not bandwidth you don't have, it's the technical knowledge and ability. And 98% of the public do not. So the idea this is pitched at any random Joe is farcical and that Joe can learn this stuff is nonsense.

  • @LilRedDog

    @LilRedDog

    Жыл бұрын

    @@deang5622 I thought you were being -intentionally- punny; my bad.

  • @wannabedal-adx458

    @wannabedal-adx458

    Жыл бұрын

    Cyber security is all about levels of risk and protection. If you are not interested is higher levels of protection, then you are right this video doesn't apply. If you care more about security and privacy, then you'll take the time to learn this.

  • @oceanwonders

    @oceanwonders

    Жыл бұрын

    @@wannabedal-adx458 Agreed. We all do what we feel we are able to do, what's worth it for us.

  • @ltsiver
    @ltsiver Жыл бұрын

    I would believe it. Listening to security now and hearing the stories of microtik, Asus, D-Link, Netgear, Belkin, Cisco, and Linksys problems... Well.... Up until recently, the routers required manual firmware updates. Thankfully now, many of them self update.

  • @shaunclarke94

    @shaunclarke94

    Жыл бұрын

    What do you have against Mikrotik or Cisco? Both are perfectly fine solutions, but are not really for beginners or novices.

  • @ltsiver

    @ltsiver

    Жыл бұрын

    @@shaunclarke94 I don't have anything against them. I was referring to their security flaws.

  • @shaunclarke94

    @shaunclarke94

    Жыл бұрын

    @@ltsiver any network hardware manufacturer is going to be affected by vulnerabilities. Of the ones you listed, Cisco and Mikrotik are the ones I'd trust to actually release updates as they aren't targeting the residential market exclusively.

  • @georgevavoulis4758
    @georgevavoulis4758 Жыл бұрын

    Thanks Naiomi . 😊

  • @andywoodruff6
    @andywoodruff6 Жыл бұрын

    When installing pfsense I had to hit space bar to select the protectli drive. You didn't mention this in your tutorial so posting for awareness.

  • @kalimbomkalla9628
    @kalimbomkalla9628 Жыл бұрын

    Great video! Question: Is there a reason why you went for pfsense instead of opnsense seeing that it has a friendly gui and more plugins?

  • @NaomiBrockwellTV

    @NaomiBrockwellTV

    Жыл бұрын

    It's what was recommended by Michael Bazzel so I defaulted to his setup

  • @mattd5136

    @mattd5136

    Жыл бұрын

    @@NaomiBrockwellTV on the upside as OPNsense is a fork of pfSense the learning curve to switch between them is pretty darn slim.

  • @v2joecr
    @v2joecr10 ай бұрын

    The 169.254.*.* IP range also applies in a Windows environment as well. I'd assume it happens in most OSs. The oldest version of Windows I remember seeing this with was Windows XP. The 169.254.*.* is also called an APIPA for Automatic Private IP Addressing. Another reason to use a separate device for the wireless you don't have to replace the router to gain access to newer wireless standards as you only have to replace the access point. Also, some routers don't have the convenient setting to switch it into access point mode. If the router you are putting in access point mode, the main thing you need to do is turn off the DHCP server & if it provides the option to point it to one of the ID addresses not handed out by DHCP.

  • @ssokolow

    @ssokolow

    2 ай бұрын

    I remember seeing it with Windows 9x back when I had to fiddle with a late 90s/early 2000s "your first 10BaseT home network" kit I'd bought.

  • @li_march
    @li_march Жыл бұрын

    It so cool! Thanks!

  • @Gabifuertes
    @Gabifuertes Жыл бұрын

    Yes, I do believe it. ISPs give old and low-end hardware which I should be grateful it even comes with firmware in English. Security might as well be their last concern.

Келесі