Messages

I trust my router (Asus expertwifi business line) and my isp enough.
I don't use port forwarding and got a openvpn connection on the router for when needed.
I am planning on setting up Cloudflare for outdoor home assistant use, so I think I am safe enough for a home user.

Given your reply I guess I had a fun ride exploring opnsense, but I probably use the machine for Adguard (completely new to that to, but it keeps me occupied 😄).
Thanks for the quick course and the adventure in opnsense.

Ok, let's start with how did I get here 😉
I am/was down with a back injury. I got me a cheap mini pc with 2 nic's and was looking to give it purpose.
Since I have got NAS and HASS server running I 'thought' that best use case was setting it up as a firewall.
If the conclusion is that it's overkill/unnecessary I can easily drop the project and perhaps set it up for Adguard or something.

It's pure hobby, but it does have to be functional. So please just tell me to drop the stupid project  if that you pros opinions 😆
Extra points of failure with no benefits is not worth the hobby.

What I always wondered about that transparent bridge setup: If you have only two sides between to filter traffic, then what would be so difficult as to use different subnets (aka routing)? And if you don't, like if you have separate VLANs, then how to you even get the traffic to pass your firewall?

Like I said I like my EBM68 so it would just be serving for CrowdSec, GeoIP and WireGuard.
I do not use vlan's besides a SDN on my EBM68 for a guest network.
I always that router behind router = hell, so I started out with bridge mode.

@BrandyWine
It does not have wifi, but I do have a usb to Ethernet dongle laying around. Realtek chip though, so I don't no if that is a smart move.

But my main question is, is the bridge safe from the wan side when given an local IP address.

Ok, the rabbit hole is deeper than i thought... :)
I only wanted to use the box for CrowdSec, GeoIP and WireGuard.

So my thoughts where:
igbo - no IP
igb1 - no IP
Bridge - local managemend IP

Sounded quite straight foreward, but the key is securing the bridge (if not sufficiently gaurded by the standerd firewall rules).
But since a Hero Member is warning me about dragons ;) i getting second thoughts. Did I perhaps bite off more than i can chew??

Thanks for the reply!
The reason I am bridging is because I am perfectly happy with my EBM68 and mesh nodes, but I want to dive into some more serious firewall concepts.
Besides that I am down with a back injury and I hate being bored 😅

I assume the firewall rules are something like only allowing local IP's accès the UI and applying bogon filtering?

Hello everyone,
First of all thanks for having me at the forum.

I am new to opnsense and building my first device based on an Intel j3455 with 4gb with 2 Intel n211 nic's.

I want to use it in transparant bridge mode, but the model has only two nic's.

Before I put a lot of time into it I want to know, Is this possible to build and still use the web UI in this situation (and have a safe system off course ;))

Thanks everyone!!