Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for an open-source alternative to Kerio WinRoute. Specifically, I want the PC running it to act as a firewall, router & bandwidth manager. Of the features I'm looking to use are:

  • block/allow based on the usual set of tests (protocol, source/destination ip/port, etc)
  • NAT & port redirection
  • DHCP
  • allocate a a certain minimum amount of guaranteed bandwidth to every PC on the network
  • optionally, traffic stats doesn't have anything on either "kerio" or "winroute". Any ideas?

share|improve this question

closed as off-topic by Nifle, random Jan 12 '15 at 20:59

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Nifle, random
If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 3 down vote accepted

I personally love and recommend Monowall.

*  web interface (supports SSL)
* serial console interface for recovery
      o set LAN IP address
      o reset password
      o restore factory defaults
      o reboot system
* wireless support (access point with PRISM-II/2.5/3 cards, BSS/IBSS with other cards including Cisco)
* captive portal
* 802.1Q VLAN support
* stateful packet filtering
      o block/pass rules
      o logging
* NAT/PAT (including 1:1)
* DHCP client, PPPoE, PPTP and Telstra BigPond Cable support on the WAN interface
* IPsec VPN tunnels (IKE; with support for hardware crypto cards, mobile clients and certificates)
* PPTP VPN (with RADIUS server support)
* static routes
* DHCP server and relay
* caching DNS forwarder
* DynDNS client and RFC 2136 DNS updater
* SNMP agent
* traffic shaper
* SVG-based traffic grapher
* firmware upgrade through the web browser
* Wake on LAN client
* configuration backup/restore
* host/network aliases
share|improve this answer
That looks great, will take a closer look. – romkyns Dec 19 '09 at 17:14
The absence of what they call "bounce" is a bit of a problem. I host a bunch of servers and I like to access them both internally and externally on the same URL. They suggest some tricks with DNS, but I wasn't planning to host any DNS services... – romkyns Dec 20 '09 at 10:46
What you are looking for is NAT Loopback and I thought that it does support that :S – William Hilsum Dec 20 '09 at 12:01

i'm running a Smoothwall box, probably the most powerful open source firewall available, right on par with BIG $$$ commercial products, and yet it is quite easy to manage.

another excellent alternative is Vyatta Community Edition ("a powerful network appliance that can run circles around proprietary systems"), it features routing, firewalling, VPN, intrusion prevention, and WAN load balancing services.

share|improve this answer
+1 for Vyatta Community Edition. – Joe Internet Dec 20 '09 at 13:41

I recommend IPCop available from

share|improve this answer

Try untangle at . It can be installed on windows so you won't require a dedicated box like solutions above would require.

share|improve this answer
Doesn't look like the right kind of tool for me - it doesn't say anything about routing for example. I am actually looking for something to run on a dedicated box and do NAT and DHCP and stuff, to replace the router rather than work alongside it. – romkyns Dec 20 '09 at 10:48 may be what you want. – Oracle2b Dec 21 '09 at 18:54
Untangle also requires two network cards. – Alan B Mar 4 '13 at 12:31

Besides other great products like IPCop and monowall, there's Endian FW, available as community edition.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged .