Simple Hardware Firewall

I need to build an outboard IP filtering firewall for a dedicated application that only allows traffic to/from a couple address ranges. I simply want to discard everything else coming or going.

Hardware, something like the Nano-Pi, with a GUI setup/config would be a nice small build.

I have looked at several on-PC softwares and in the end, I've come down to the point I just need to divorce the two to keep things separate security wise. Going with a subscription based FW that I would never use 99.999% of the features makes no sense.

Anybody have any experience in this area?

All suggestions and comments greatly appreciated!!!

B

 

If you're talking PI Zero, they don't have ethernet on board, the PI Zero W (Wireless) of course has wifi. You can use a micro usb to USB hub to add ethernet. Step up to a regular PI 3 or so, 4 might be overboard & they cost more. There are some Google instruction on using the PI as a firewall or router. If you have an old PC there is IPCop, SmoothWall, IPFire, PFSense and Zeroshell. Some made for old hardware, some for newer hardware.
If your router is dd-wrt compatible you supposedly can do it there. Look up iptables.

Question, these others that are connecting have static IPs? or how will you know who to filter?
Also sounds like you might want site to site VPN, or do you consider that?

 

Foo,
Great info. Will check it out. Thank you very much for the good steer!!!!!!!!!!! Really appreciate that!!!
B