Search Results

This runbook defines the network topology, architecture, security configuration, and operational procedures for TheDen Home Network. It documents how the household network is segmented, protected, monitored, and maintained to ensure privacy, integrity, and ava...

2.1 Defense in Depth Overview TheDen Home Network follows a layered defense model, with multiple safeguards that provide independent protection. Layers include OPNsense, VLAN segmentation, encrypted DNS (DoT), and Suricata IPS. 2.2 Zero Trust and Least Privi...

3.1 Overview TheDen Home Network is designed for segmentation, performance, and manageability using VLANs to isolate traffic and prevent lateral movement between device classes. A router (Protectli FW6D running OPNSense) handles routing/NAT, VLAN termination,...

4.1 Overview The OPNsense firewall on the FW6D serves as the central routing, filtering, and NAT layer. It enforces a stateful inspection model with a default‑deny policy between VLANs. Explicit rules are defined to permit minimal, functional inter‑VLAN commu...

5.1 Overview TheDen Home Network uses the Unbound recursive DNS resolver integrated within OPNsense for all local name resolution. All VLANs resolve queries through Unbound, ensuring encrypted DNS using DoT and preventing external DNS leakage. The resolver va...

6.1 Overview Wireless connectivity is provided by an UniFi U6+ access point running eight WiFi networks. Each SSID is mapped to a corresponding VLAN and carried through a 802.1Q trunk line to the router to provide isolation between wireless networks. 6.2 SSI...

7.1 Overview TheDen Home Network employs a layered approach to threat detection, focusing on visibility, containment, and recovery. While advanced monitoring is not yet implemented, the foundation is established through OPNsense’s Suricata intrusion detection...

8.1 Purpose Defines how to identify, contain, and recover from potential network or device security incidents within TheDen Home Network. Focuses on practical response steps using OPNsense, UniFi, and Suricata without centralized monitoring. 8.2 Incident Cat...

9.1 Overview This section defines the operational procedures for keeping TheDen Home network current, stable, and secure. 9.2 Software and Firmware Updates OPNsense: Check for updates monthly (System -> Firmware -> Updates) Apply security updates i...

Appendix A - Hardware Device Description Link Protectli FW6D OPNsense firewall/router appliance https://protectli.com/product/fw6d/ UniFi U6+ Access Point Dual-band WiFi 6 AP (managed by UniFi Controller) ...

This is a plain‑English, step‑by‑step runbook introducing general security and privacy concepts and providing guidance on how to protect your computers, phones, and yourself from common threats such as scams, stolen passwords, malware, and lost devices. The fo...

Everything in this guide flows from these four concepts. Keep them in mind and most day‑to‑day decisions get simpler. Protect Yourself Be a skeptic. Treat unexpected links, attachments, and “urgent” requests as suspicious; verify using a separate channel...

There is a lot of information in this runbook, and at first glance, it might be intimidating. Take it piece-by-piece. This runbook is laid out in a series of topics dealing with a specific security and privacy area, prioritized based on risk, and tiered into: ...