Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Firewall settings

In the firewall settings options, you see how to adjust some firewall configurations such as optimization, firewall's behavior and maximum values to settings such as states and table entries.

In the following section, we will learn how each option can change the firewall settings and behavior globally in the system:

  1. To start, head to Firewall | Settings | Advanced.
  2. On this page, the first option is related to IPv6 traffic – IPv6 Options.
  3. Allow IPv6: The default action is to block all the IPv6 traffic; if you don't want to block it, just check this option.
  4. NAT: The following options are related to NAT. In the next chapter, we will learn how to create NAT rules in OPNsense; for now, we'll just look at some settings that can adjust the way some NAT rules work in OPNsense.
    • Reflection for port forwards: If OPNsense has NAT rules for forwarding ports using external (internet) addresses and you want your local networks to reach...