soho firewall best practices advice

[tcronin]

i'm setting up a home network with the following:

• Protectli 6 port Vault
• UniFi nanoHD
• lan bridge setup

i got Opnsense up and running and am looking for a good firewall primer for home use. I have windows machines on it that need print and file sharing. i noticed that the lan default rules are to allow all lan traffic. i tried disabling them then open ports as needed but this got out of hand quickly.

any advice would be much appreciated.