Your router and wireless access point seem OK. The switch looks suspicious, there is conflicting information in the description, some parts indicate Managed and some indicate Unmanaged. I caution against that switch specifically.

I investigated more and it seems that one can indeed perform NAT with Linux netfilter without the Masquerade action. If one knows the address of the interface, simply using the “SNAT” action with a to-address of the outbound interface will achieve the same result as using the “MASQUERADE” action, as long as the address of the outbound interface does not change.

But, this fact only matters for the actual underlying netfilter. I should have been thinking about OP’s application specifically. For OpenWRT it probably does just mean Checked->NAT, Unchecked->No NAT.

Oh, thank you! I think I mixed up the option with something else. I appreciate the correction!

Everything you’ve said here also aligns with my knowledge!

I can add some additional information.

The Masquerade option changes how the packet rule behaves when performing in a NAT situation. When Masquerade is off, the rule is configured statically with each interface’s address when the rule is loaded. When Masquerade is on, the rule is evaluated dynamically every time against each interface’s current address.

If you are routing packets through an interface, and the interface’s address is dynamic (which is the case for most residential internet connections), you should have Masquerade ON to be able to route packets after the interface’s address changes during normal operation.

Is this what ArchLinux uses for its AUR? it looks similar

Simplifying doesn’t have to mean fewer lines. LGTM.

Good read!

I’ve used both and I prefer kdenlive

It seems like it’s a managed solution though

How did you set up your phone number to go through your own XMPP server? That sounds awesome.

pfSense is great!!! I bought a Netgate router which comes with pfSense Plus.

OP, consider buying a Netgate router if you want no hassle, or if you’re up for installing an OS then you can put pfSense on a custom platform like ZimaBoard or Protectli.