Search Results

This runbook defines the network topology, architecture, security configuration, and operational procedures for TheDen Home Network. It documents how the household network is segmented, protected, monitored, and maintained to ensure privacy, integrity, and ava...

2.1 Defense in Depth Overview TheDen Home Network follows a layered defense model, with multiple safeguards that provide independent protection. Layers include OPNsense, VLAN segmentation, encrypted DNS (DoT), and Suricata IPS. 2.2 Zero Trust and Least Privi...

3.1 Overview TheDen Home Network is designed for segmentation, performance, and manageability using VLANs to isolate traffic and prevent lateral movement between device classes. A router (Protectli FW6D running OPNSense) handles routing/NAT, VLAN termination,...

4.1 Overview The OPNsense firewall on the FW6D serves as the central routing, filtering, and NAT layer. It enforces a stateful inspection model with a default‑deny policy between VLANs. Explicit rules are defined to permit minimal, functional inter‑VLAN commu...

5.1 Overview TheDen Home Network uses the Unbound recursive DNS resolver integrated within OPNsense for all local name resolution. All VLANs resolve queries through Unbound, ensuring encrypted DNS using DoT and preventing external DNS leakage. The resolver va...

6.1 Overview Wireless connectivity is provided by an UniFi U6+ access point running eight WiFi networks. Each SSID is mapped to a corresponding VLAN and carried through a 802.1Q trunk line to the router to provide isolation between wireless networks. 6.2 SSI...

7.1 Overview TheDen Home Network employs a layered approach to threat detection, focusing on visibility, containment, and recovery. While advanced monitoring is not yet implemented, the foundation is established through OPNsense’s Suricata intrusion detection...

8.1 Purpose Defines how to identify, contain, and recover from potential network or device security incidents within TheDen Home Network. Focuses on practical response steps using OPNsense, UniFi, and Suricata without centralized monitoring. 8.2 Incident Cat...

9.1 Overview This section defines the operational procedures for keeping TheDen Home network current, stable, and secure. 9.2 Software and Firmware Updates OPNsense: Check for updates monthly (System -> Firmware -> Updates) Apply security updates i...

Appendix A - Hardware Device Description Link Protectli FW6D OPNsense firewall/router appliance https://protectli.com/product/fw6d/ UniFi U6+ Access Point Dual-band WiFi 6 AP (managed by UniFi Controller) ...

This is a plain‑English, step‑by‑step runbook introducing general security and privacy concepts and providing guidance on how to protect your computers, phones, and yourself from common threats such as scams, stolen passwords, malware, and lost devices. The fo...

Everything in this guide flows from these four concepts. Keep them in mind and most day‑to‑day decisions get simpler. Protect Yourself Be a skeptic. Treat unexpected links, attachments, and “urgent” requests as suspicious; verify using a separate channel...

There is a lot of information in this runbook, and at first glance, it might be intimidating. Take it piece-by-piece. This runbook is laid out in a series of topics dealing with a specific security and privacy area, prioritized based on risk, and tiered into: ...

Core Concepts: Protect Yourself, Protect Your Data When you log into a computer or website with a User ID and password, you are authenticating; proving you are who you claim to be. Get this topic right and you block 90% of account compromises. 2.1.1 Understa...

Core Concepts: Protect Yourself, Protect Your Data Humans are the weakest link in security. Even perfect technical security fails if you're tricked into handing over credentials or sending money. The good news is most scams use the same playbook, so learn to ...

Core Concept: Protect Yourself, Protect Your Data Your identity and your cloud accounts are two of your most valuable digital assets. Your identity can be used to open accounts, file fraudulent tax returns, and ruin your credit. Your cloud accounts, Google, M...

Core Concepts: Minimize Your Exposure, Protect Your Data Malware often disguises itself as legitimate software. A free game, a helpful utility, even a security tool can hide viruses, spyware, or ransomware. The software you install is one of the largest parts...

Core Concepts: Protect Your Data, Minimize Your Exposure Your phone carries more personal data than your computer ever did, photos, messages, contacts, emails, banking apps, location history, health data, and more. It goes everywhere with you, making it vulne...