Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Creating rules

To start and create a new traffic shaping rule, log in to the WebGUI and go to the Firewall | Shaper menu.

As an example, we will create a rule that defines the maximum download bandwidth usage for each user in our local network. Let's take the example of a local network with a 100 Mbps WAN connection shared across a few hosts.

Figure 7.1 – Limiting maximum bandwidth per host

Figure 7.1 – Limiting maximum bandwidth per host

To start creating the rule, go to Firewall | Shaper | Pipe:

  1. Click on the + icon to add a new pipe.
  2. Make sure the Enabled option is checked.
  3. In the Bandwidth field, type 10.
  4. In the Bandwidth Metric option, select Mbit/s.
  5. In the Mask option, select destination. This way, each destination will have 10 Mbps available. In our example, with this setting, you can have a maximum of 10 hosts: 10 hosts x 10 Mbps = 100 Mbps.
  6. Leave the Enable CoDel and Enable PIE schedulers unchecked.
  7. For the Description field, enter something like...