Comment

How would you change his setup to prevent ARP attacks? More network segmentation (clients and servers on separate VLANs) or does OPNsense additional protections I should look into?

source

Sort:hotnew top

transmatrix@lemmy.world ⁨1⁩ ⁨year⁩ ago
Don’t have the Wi-Fi network “upstream” of the LAN. You want the connection between the LAN and Wi-Fi to be through the WAN so you get NAT protection.

source
- Ac5000@lemm.ee ⁨1⁩ ⁨year⁩ ago
  Any way you could update/create your own drawing with what you mean? (Bad paint drawings are acceptable!)
  
  I ask because I am curious if I am subject to the same problem. I’m not the most networking savvy so I need the extra help/explanation and maybe the drawing will help others.
  
  source