Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Web filtering

As the modern internet works on top of protocols such as HTTP and DNS, web filtering is one of network administrators' most desired features in their firewalls to keep network users under some control. On OPNsense, this feature doesn't have a dedicated functionality as a core feature or an official plugin; instead, the web proxy achieves web filtering by configuring it with some additional features the OPNsense team has added since the project started. As the web proxy functionality on OPNsense is Squid-based, let's take a closer look at the Squid web proxy project to better understand this filtering matter.

The Squid project website definition is reproduced here: "Squid is a caching proxy for the web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator." (http://www.squid-cache.org...