Securing Internet services on your home network


Mistborn provides security in several ways. All services run in separate Docker containers. To see which Docker containers are active, use:

sudo docker container ls -a

Access to Mistborn is only available via WireGuard: The virtual private server service does not respond to unauthenticated traffic.

The iptables-persistent package takes care of automatically loading the iptables rules, which are created during the installation of Mistborn and each time Docker is started. A chapter in the documentation [8] provides detailed explanations.

Conclusion and Outlook

Mistborn impressed us in the test. The idea of securing a home network and managing as many services as possible in a single interface has been professionally implemented. This fairly young application still has some rough edges, but the core features run smoothly. We were able to smooth out some of these rough edges during the test phase by cooperating with Foerster, who was very accessible. He already has plans for further services and other extensions [9].

If you run into problems with Mistborn, check out the Troubleshooting section on the website [10]. If you can't find an answer there, Foerster will be happy to help you via email at

For testing and for the basic applications (WireGuard and Pi-hole), a Raspberry Pi 4 may be sufficient. If you want to use further services on a permanent basis, you will want to change to more powerful hardware. Using the cloud is a good option, as you do not need the DDNS service there. However, a laptop built in the last 10 years like the Thinkpad X220 from 2011 will do the trick. But no matter what hardware you opt for, Mistborn is definitely worth a closer look.

The Author

Ferdinand Thommes lives and works as a Linux developer, freelance writer, and tour guide in Berlin.

Buy Linux Magazine

Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Tipi

    Tipi gives you complete control of more than 100 applications and services. A mouse click is all it takes to install the apps.

  • WireGuard

    A recent addition to the Linux kernel, WireGuard lets you build a VPN tunnel that relies on encryption to reduce potential security issues.

  • Teaming NICs

    Combining your network adapters can speed up network performance – but a little more testing could lead to better choices.

  • Mozilla VPN Now Available for Linux

    The promised subscription-based VPN service from Mozilla is now available for the Linux platform.

  • Pi-hole

    Supporting browser plug-ins, network-based DNS blockers like Pi-hole help protect you against online tracking and unwanted content.

comments powered by Disqus
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters

Support Our Work

Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.

Learn More