https://billalrehmani.pages.dev/series/hardening-network/Recent content in Hardening Network on Bill's Bloghttps://billalrehmani.pages.dev/images/eft-bg.jpghttps://billalrehmani.pages.dev/images/eft-bg.jpgHugoen-AUSun, 12 Jul 2026 21:30:00 +1000https://billalrehmani.pages.dev/posts/vlan-segmentation-pfsense/Sun, 12 Jul 2026 21:30:00 +1000https://billalrehmani.pages.dev/posts/vlan-segmentation-pfsense/Building three firewall-isolated network segments — Trusted, IoT, and Guest — entirely in virtual machines, with no managed-switch hardware, and proving the isolation holds.https://billalrehmani.pages.dev/posts/hardening-debian-homelab-vm/Tue, 07 Jul 2026 21:50:00 +1000https://billalrehmani.pages.dev/posts/hardening-debian-homelab-vm/The VM is already isolated behind a pfSense firewall — so why harden it? Because two paths reach in without ever crossing pfSense. An honest audit of my own box, the fixes, and the sandbox gotcha that broke a service.https://billalrehmani.pages.dev/posts/home-network-hardening-hwg2025/Mon, 29 Jun 2026 12:10:00 +1000https://billalrehmani.pages.dev/posts/home-network-hardening-hwg2025/How I hardened and segmented my home network on an ISP-provided Wi-Fi 7 router — and the DNS gotcha that makes doing it properly harder than it should be.