Re: [GLLUG] Best NIX-based router/software for a small business network

2021-06-16 Thread Marco van Beek via GLLUG
On 15/06/2021 20:45, James Courtier-Dutton via GLLUG wrote: So, the best defense is using a backup system that cannot be attacked by a Ransomware attack. And your second line of defence is a second backup system that cannot be attacked by a Ransomware attack... For the third, maybe a local ba

Re: [GLLUG] BEST NIX-BASED ROUTER

2021-06-16 Thread Tim Clarke via GLLUG
I have found the Ubiquiti Edge-X router/firewall appliances to be good and pretty easy to set up (web gui interface). They are also very reasonably priced, compact and no moving parts. Only drawback, I think, is the learning curve for the firewall/nat setup (somewhat different to standard iptable

Re: [GLLUG] Best NIX-based router/software for a small business network

2021-06-16 Thread James Courtier-Dutton via GLLUG
On Wed, 16 Jun 2021, 11:03 Marco van Beek via GLLUG, < gllug@mailman.lug.org.uk> wrote: > > On 15/06/2021 20:45, James Courtier-Dutton via GLLUG wrote: > > So, the best defense is using a backup system that cannot be attacked > > by a Ransomware attack. > And your second line of defence is a secon

Re: [GLLUG] BEST NIX-BASED ROUTER

2021-06-16 Thread John Edwards via GLLUG
Hi On Wed, Jun 16, 2021 at 12:12:39PM +0100, Tim Clarke via GLLUG wrote: > I have found the Ubiquiti Edge-X router/firewall appliances to be good > and pretty easy to set up (web gui interface). > They are also very reasonably priced, compact and no moving parts. > Only drawback, I think, is the l

Re: [GLLUG] BEST NIX-BASED ROUTER

2021-06-16 Thread Martin A. Brooks via GLLUG
On 2021-06-16 13:13, John Edwards via GLLUG wrote: The Ubiquiti look pretty, and can work well, but have a history of poor compliance with the GPL as well as a very bad approach to security: I am a unifi fanboi, and run their kits for my (fairly complex) home network. I recommend them to fri

Re: [GLLUG] BEST NIX-BASED ROUTER

2021-06-16 Thread John Winters via GLLUG
On the backups front, I have long felt that for secure backups it is essential that the backups are driven by the backup server. The backup server establishes a connection to the live server and backs up what it is configured to back up. The live server must have no access to the backup serve