Build a Home Firewall with OPNsense and Test AI Management

Summary

A home-network tutorial installs OPNsense on a mini PC, configures DNSSEC, encrypted DNS and DNS blocklists, then tests an AI agent’s API-based firewall changes, including a DHCP reservation and country-based rules.

Key points

• The presenter warns that mass-produced home gateways may have software vulnerabilities and repeats a claim about Chinese hackers inside routers; he clarifies that existing routers are grandfathered and not illegal.
• The tutorial installs OPNsense on x86 hardware and explains that the firewall does not replace a network switch or wireless access point.
• A managed switch can support VLAN separation for IoT devices, though switch and access-point setup is deferred to a later episode.
• The presenter demonstrates placing OPNsense behind an existing gateway with double NAT, or using bridge mode; double NAT may cause issues with some applications.
• The configuration enables DNSSEC and DNS-over-TLS, adds DNS blocklists, and demonstrates that the lists block ads.
• Using an OPNsense API key, the Hermes agent adds a DNS server, creates a DHCP reservation, and configures firewall rules using Mainland China CIDR feeds.