02 / CONNECTIVITY
Networking
Make addressing, routing, and access policy explicit. Practical guides for OPNsense, MikroTik, and virtual networks.
MikroTik Address Lists: Organise Firewall Policy Clearly
Create and review RouterOS address lists while keeping interface scope, service permissions, dynamic entries, and trust boundaries explicit.
MikroTik Backups and Firewall Logs: Build a Recovery Routine
Separate RouterOS backups from text exports, protect operational data, and use focused firewall logging with a tested recovery process.
MikroTik Firewall Chains: Input, Forward, and Output Explained
Trace router administration and routed traffic through RouterOS chains, rule order, and connection state without confusing NAT with filtering.
MikroTik Firewall Hardening: Reduce Exposure Before Blocking Scans
Prioritise protected management, precise rules, bounded logging, and measured detection instead of fragile blacklist recipes.
MikroTik Firewall Setup: Audit First and Keep Recovery Access
Prepare RouterOS firewall changes with an inventory, saved configuration, Safe Mode, and positive and negative connectivity tests.
MikroTik Forward Chain: Segment LAN, Guests, and VPN Clients
Build a RouterOS traffic matrix for routed networks, preserve required return paths, and test denied access as well as permitted flows.
MikroTik Hairpin NAT: Trace the Return Path and Fix Local Access
Diagnose local access to a public service hostname by checking DNS, destination NAT, firewall policy, and the server return path.
MikroTik Input Chain: Restrict Router Management Safely
Design a RouterOS input policy that protects administration while preserving required DNS, DHCP, VPN, and diagnostic traffic.
MikroTik WireGuard Setup: Split-Tunnel Remote Access
Build a RouterOS 7 WireGuard split tunnel with a client configuration, narrow firewall permissions, return-route checks, and troubleshooting.
OPNsense DNS over TLS: Configure and Verify Unbound
Set up OPNsense Unbound DNS over TLS with certificate verification, local DNS exceptions, packet capture checks, and practical troubleshooting.
OPNsense Kea DHCP Migration: Leases, DNS, and Rollback
Decide whether Kea fits your OPNsense network, migrate DHCP without overlapping leases, and verify reservations, client options, DNS, and rollback.
OPNsense on Proxmox: WAN, LAN, and Recovery Design
Plan an OPNsense VM on Proxmox with separate WAN and LAN bridges, reachable host management, safe DHCP cutover, and isolation tests.