OpenWRT is a Linux distro. Just one optimized for embedded devices. If don't like the very utilitarian web UI can connect over ssh and use iptables or whatever else you want.
replyBut that means custom per-device firmware builds, that in my experience with every router I tried it on means they lag months/years behind security patches. Is there some way to stay patched without building from source and reflashing every time a patch to something upstream happens? (almost daily, now, I guess that means?)
replyIf something urgent appears, a point release will be made asap. If worry that isn't soon enough, can use the daily snapshot builds. That said, imo an essential device like a router should be as solid as possible and only upgraded if important rather for minor bug fixes.
replyIs there any good GUI for a vanilla Linux networking stack, to your knowledge?
replyIIRC, IPFire is more or less that. I control my Debian router/home server using SSH and have no GUI at all. It's largely set and forget, and don't recall last time I touched the firewall.
reply