Firewall Configuration
Firewall Configuration
This guide covers the Firewall Configuration for the ProxLink homelab, using OPNsense as the primary firewall and router. The firewall sits at the core of the ProxLink network topology and manages traffic between the WAN, LAN, and DMZ subnets, as well as access control for services and remote VPN connections via NetBird.
Firewall Overview
ProxLink uses OPNsense, an open-source, FreeBSD-based firewall and routing platform, deployed as a virtual machine inside the Proxmox environment. OPNsense handles:
- Routing between the WAN, LAN, and DMZ
- NAT and Port Forwarding
- Traffic Filtering (Inbound & Outbound)
- Access Control between LAN, DMZ, and WAN
- Forwarding firewall logs to Splunk via remote syslog
Interface Mapping
| Interface | OPNsense Name | Bridge | Subnet | Purpose |
|---|---|---|---|---|
| net0 | WAN | vmbr0 | 192.168.1.0/24 | External / Internet access |
| net1 | LAN | vmbr1 | 192.168.2.0/24 | Internal trusted network |
| net2 | DMZ | vmbr2 | 192.168.3.0/24 | Exposed services network |