Firewall Configuration

Firewall Configuration

This guide covers the Firewall Configuration for the ProxLink homelab, using OPNsense as the primary firewall and router. The firewall sits at the core of the ProxLink network topology and manages traffic between the WAN, LAN, and DMZ subnets, as well as access control for services and remote VPN connections via NetBird.

Firewall Overview

ProxLink uses OPNsense, an open-source, FreeBSD-based firewall and routing platform, deployed as a virtual machine inside the Proxmox environment. OPNsense handles:

  • Routing between the WAN, LAN, and DMZ
  • NAT and Port Forwarding
  • Traffic Filtering (Inbound & Outbound)
  • Access Control between LAN, DMZ, and WAN
  • Forwarding firewall logs to Splunk via remote syslog

Interface Mapping

InterfaceOPNsense NameBridgeSubnetPurpose
net0WANvmbr0192.168.1.0/24External / Internet access
net1LANvmbr1192.168.2.0/24Internal trusted network
net2DMZvmbr2192.168.3.0/24Exposed services network