To be fair: you can do that with probably any unixoid OS. IMHO, it is just much easier with BSDs because a) documentation of how to do it is much easier to access than on linux or the other two(TM) and b) BSDs tend to follow the KISS-principle - meaning: even with the superb documentation one can just read the posix shell scripts to save some time.
Re:OpenBSD 6.4 released
by technofiend on Thursday October 18, 2018 @04:53PM
(#18252010)
>To be fair: you can do that with probably any unixoid OS
Totally.
With a little work you can have your own caching DNS server including domain blocks for tracking sites and if you want privoxy or a squid proxy. It's also easy to set up your own root CA and switch over to certificate-based authentication for wireless clients as long as the wireless base station supports radius.
I haven't published a tech note on it yet because Android still complains about importing self-signed certificates even when you import the root CA.