I "think" I understand that all firewalls are software. However, I am splitting the monthly internet bill with a roommate who has the ISP modem/router in his room. I would like add (if possible) more security measures. (I cannot get my own ISP in my room; as the house is designated as a “heritage house” and the landlord won’t agree to any “drilling”). I have my macOS firewall turned on to “block all incoming connections”. I also use Tunnel Bear VPN.

Are there any recommendations (hardware or software) available considering my situation?

closed as too broad by Mark, nohillside Dec 20 '17 at 14:01

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • I fail to see how a hardware solution has anything to do with macOS. – JMY1000 Dec 20 '17 at 5:31
  • @JMY1000 - technically speaking, the Airport Express or the Airport Extreme would classify as a "hardware solution" in this scenario. – Allan Dec 20 '17 at 8:51
  • I'm voting to close this question as off-topic because this does not seem Apple specific it would be the same for a windows pc. – Mark Dec 20 '17 at 11:55
  • @Mark - there are many things in the Apple-verse that would also apply to a Windows PC; that in and of itself doesn't make it off topic. – Allan Dec 20 '17 at 13:48
  • What is your goal/intention here, what do you want to improve/prevent? – nohillside Dec 20 '17 at 14:00

If you want more security than what you have now, you could add a hardware based router/firewal between your roommates Internet connected network and your "network"

What you would be doing is connecting your WAN port of your router to your roommates LAN. This will create a "double NAT" network, where your roommate becomes your ISP.

The benefit this has over a highly configured firewall is that the router will immediately block all incoming traffic (by default) on the roommates LAN but allow you egress to the Internet.

Not the answer you're looking for? Browse other questions tagged .