Here be firewall rules:
| Protocol | Source | Port | Destination | Port | Description |
|---|---|---|---|---|---|
| IPv4 * | CameraVLAN (192.168.4.0/24) | * | 192.168.1.17/32 (NVR) | * | Allow Cameras to Reach NVR |
| IPv4 UDP | CameraVLAN (192.168.4.0/24) | * | AD_DNS_SERVERS (7.150,7.151) | 123 (NTP) | Allow Cameras NTP Traffic |
| IPv4 * | 192.168.5.19/32 | * | AD_DNS_SERVERS (7.150,7.151) | * | Allow Media PC to reach DC(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | WirelessClients (192.168.2.0/24) | * | 192.168.99.2 (UniFi Controller) | * | Allow Clients to reach UniFi Controller |
| IPv4 * | IoT Network (192.168.5.0/24) | * | * | * | Allow IoT to reach * (Change) ⚠️ |
| IPv4 * | FAFO Network (192.168.8.0/24) | * | * | * | Allow FAFO to reach * (Change) ⚠️ |
| IPv4 * | Wireless Clients (192.168.2.0/24) | * | * | * | Allow Wireless Clients to reach * (Change) ⚠️ |
| IPv4 * | Phone Network (192.168.6.0/24) | * | * | * | Allow Phones to reach * (Change) ⚠️ |
| IPv4 * | 10GB VM Network (192.168.7.0/24) | * | * | * | Allow VMs to reach * (Change) ⚠️ |
| IPv4 * | Default Network (192.168.1.0/24) | * | * | * | Allow Default VLAN to reach * (Change) ⚠️ |
| IPv4 * | Management Network (192.168.99.0/24) | * | Default VLAN (192.168.1.0/24) | * | Allow Management VLAN to reach default VLAN (Change) ⚠️ |
| IPv4 * | Management Network (192.168.99.0/24) | * | AD_DNS_SERVERS (7.150,7.151) | * | Allow Management VLAN to reach AD/DNS/NTP Server(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | 192.168.99.2 (UniFi Controller) | * | AD_DNS_SERVERS (7.150,7.151) | * | Allow UniFi Controller to Reach AD/DNS/NTP Server(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | 192.168.99.2 (UniFi Controller) | * | * | * | Allow UniFi Controller to Reach * (Change) ⚠️ |
| IPv4 * | WittNet_Network (192.168.20.0/24) | * | AD_DNS_SERVERS (7.150,7.151) | * | Allow WittNet Peers to Reach AD/DNS/NTP Server(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | WittNet_Network (192.168.20.0/24) | * | KMS_SERVER (192.168.7.37) | * | Allow WittNet Peers to Reach KMS Server (Adjust: Narrow Ports) 🔧 |
| IPv4 * | 192.168.20.21 (OffsiteVMHost1) | * | 192.168.99.12 (Proxmox Datacenter Manager) | * | Allow OffsiteVMHost1 to reach Proxmox DCM (Adjust: Narrow Ports) 🔧 |
| IPv4 * | 192.168.20.13 (Offsite RODC) | * | AD_DNS_SERVERS (7.150,7.151) | * | Allow Offsite RODC to reach AD/DNS/NTP Sever(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | 192.168.20.15 (Offsite NAS) | * | AD_DNS_SERVERS (7.150,7.151) | * | Allow Offsite NAS to reach AD/DNS/NTP Server(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | WirelessClients (192.168.2.0/24) | * | Default VLAN (192.168.1.0/24) | * | Allow Wireless Clients to reach Default VLAN Clients (Adjust: Scope) 🔧 |
| IPv4 * | 10GBVMNetwork (192.168.7.0/24) | * | Default VLAN (192.168.1.0/24) | * | Allow 10GBVMNetwork to reach Default VLAN Clients (Adjust: Scope) 🔧 |
| IPv4 * | Default VLAN (192.168.1.0/24) | * | Phone VLAN (192.168.6.0/24) | * | Allow Default VLAN to reach Phones (Adjust: Reconsider?) 🔧 |
| IPv4 * | Phone VLAN (192.168.6.0/24) | * | AD_DNS_SERVER(s) | * | Allow Phones to Reach DNS/NTP Server(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | Default VLAN (192.168.1.0/24) | * | FAFO VLAN (192.168.8.0/24) | * | Allow Default VLAN to reach FAFO VLAN (Adjust: Reconsider?) 🔧 |
| IPv4 * | Default VLAN (192.168.1.0/24) | * | 10GBVMNetwork (192.168.7.0/24) | * | Allow Default VLAN to reach 10GB VM Network (Adjust: Narrow Scope) 🔧 |
| IPv4 * | FAFO Network (192.168.8.0/24) | * | AD_DNS_SERVER(s) (7.150,7.151) | * | Allow FAFO Network to reach AD/DNS/NTP Server(s) (Adjust: Narrow Ports) 🔧 |
| IPv4 * | FAFO Network (192.168.8.0/24) | * | 192.168.1.16 (NAS) | * | Allow FAFO Network to reach NAS (Adjust: Reconsider?) 🔧 |
| IPv4 * | Management VLAN Network (192.168.99.0/24) | * | * | * | Allow Management VLAN to reach * (Change) ⚠️ |
| IPv4 * | 192.168.7.11 (HomeBridge) | * | IoT VLAN (192.168.5.0/24) | * | Allow Homebridge to reach IoT Devices |
| IPv4 * | IoT VLAN (192.168.5.0/24) | * | 192.168.7.11 (HomeBridge) | * | Allow IoT Devices to reach Homebridge |
| IPv4 * | PhoneVLAN Network (192.168.6.0/24) | * | FAFO Network (192.168.8.0/24) | * | Allow Phones to reach FAFO Network |