I will audit and harden your opnsense firewall
Network and Systems administration
About this Gig
About This Gig
Your OPNsense firewall has accumulated rules over months or years. Some are redundant. Some contradict each other. Some pass traffic that shouldn't. This gig finds all of them.
What you get:
Complete ruleset audit every floating rule, every interface rule
NAT hygiene check port forwards, outbound NAT, 1:1 NAT
VLAN boundary validation is your DMZ actually isolated? Is your guest network actually contained?
Logging configuration review are you capturing what you need?
Rule ordering and shadowing analysis are later rules undoing earlier ones?
Deliverable: A written report organized by severity:
CRITICAL traffic that shouldn't pass, is passing
HIGH weakens your security posture
MEDIUM redundant rules, messy config, logging gaps
LOW cleanup recommendations
Every finding includes the exact steps to fix it.
No call required. You export your config, send it to me, I deliver the report. For the Premium package, I apply fixes directly (via read-only access or config snippets you paste in).
Device:
Other
FAQ
Do you need access to my firewall?
For Basic and Standard - no. You export your config XML file and send it to me. For Premium, I'll need read-only access to apply fixes, or I send you the exact commands to paste in yourself.
What if I have more than 150 rules?
The Basic and Standard packages are sized for most home and small business setups. If your config is larger, choose Premium - it has no rule limit.
Do you work with pfSense too?
Yes, pfSense and OPNsense share the same architecture. The audit process is identical.
Will my network go down during audit?
No. The audit is read-only. If you choose Premium where i apply fixes, changes are applied one at a time with rollback points. You're in control.
