Messages

[Goal]

(Feel free to move this elsewhere if there's a better category.)

Previous experience has shown than I tend to mess up when I try to experiment with my firewall and network, so I thought I'd ask if any of my ideas are possible first.

Goal:

I'm looking for a way to use an old android phone as a kiosk to an app hosted on my home server. Since it's so old, I don't want it to have any internet.

And then there's my smart tv. I want to put it on a network that can't talk to anything.

USB Dongle idea
If I attached a couple usb wireless cards to my OPNSense box, could I use them to create a wireless network that didn't allow any traffic except for my app?

Router Idea
If I linked a spare wireless router to the OPNSense box using one of the open ports, could I lock down everything attached to that port? (I'm 99% sure that is possible.)

Rules Per Device Idea
Could OPNSense make sure that all traffic from a specific device is only allowed for the app I want to expose? As in my old phone would connect to my wireless network, and then OPNSense would prevent any traffic from, online games or to, it except for the designated app. How would that work when the wireless router has to route the traffic?

Are there any other ways to implement my goals?

Any tips on what to search for? My searches so far haven't found anything good.

Thanks!

Your ideas are definitely possible, and OPNsense is actually a good fit for this. The easiest approach would probably be to create separate VLANs or use a dedicated router/AP connected to a specific OPNsense interface, then apply firewall rules to isolate those devices. You don't need to control traffic by app itself; instead, allow only the IP/ports your server app needs and block everything else. For the old phone kiosk, a separate WiFi network with no WAN access but access only to your home server would work well. Search terms like "OPNsense VLAN firewall rules", "OPNsense captive portal", and "network isolation" should help.