Tag: firewall

Find unused firewall rules on a Linux box with nftables counters, then retire them safely with a snapshot-and-diff routine, a jq script, and a systemd timer.

Put smart plugs and TVs on an IoT VLAN, then fix Chromecast, AirPlay and Sonos discovery with an mDNS reflector and the right firewall rules. Configs included.

Rebuild Docker's bridge network with ip netns, veth pairs, a Linux bridge and nftables NAT. Six iproute2 commands, three nft rules, and a 2 AM debugging edge.

Configure OPNsense gateway groups for WAN failover and load balancing, then layer policy-based routing so specific hosts or VLANs use a chosen WAN link.

iptables is in soft retirement. Here's why the nft shim isn't a long-term plan and what direct nftables syntax actually buys you.

Two FreeBSD firewall distros, one bitter fork. pfSense vs OPNsense in 2026, which one to pick for your home lab, and why the licensing drama still matters.

Go beyond basic UFW rules, rate limiting, geo-blocking, application profiles, logging, and before.rules tricks for serious firewall hardening.

UFW makes iptables manageable, allow and deny rules, app profiles, default policies, and the 5-minute setup for any new Linux server.