⌘K

Zenarmor

All Privacy Hardware NAS ZFS Reverse Proxy SWAG Plex Media Server Self-Hosting CrowdSec Fail2Ban Cybersecurity Networking Jellyfin Docker Automation

Digital illustration of a server room. Glowing blue network paths converge on an isolated, glowing red cube. A text overlay reads "TRAP SPRUNG: PID ISOLATED," symbolizing threat containment. — Gotcha. Visualizing the moment the hunt moved from passive monitoring to active identification. By using tcpdump on the docker bridge network, we trapped the specific container IP responsible for the beacons, proving it was an isolated workload and not the host OS.

Threat Hunting in the Homelab

Zenarmor blocked a C2 beacon from my NAS. It wasn't the OS. See how I used tcpdump to hunt down a compromised Docker container hiding in plain sight.

A glowing digital scanner performing deep packet inspection on a high-speed data stream, destroying malicious red packets while clean blue packets safely pass through the network firewall. — Advanced Threat Protection in action: Next-Gen Layer 7 Firewalls (like Zenarmor) and IDS/IPS engines (like Suricata) dynamically scan, filter, and destroy malicious traffic in real-time.

OPNsense Part 3: Layer 7 Control & Threat Intelligence

Secure your OPNsense firewall with next-gen threat protection. Configure Suricata IDS/IPS, Zenarmor Layer 7 filtering, CrowdSec, and GeoIP blocking.

Screenshot of the Zenarmor threat dashboard, showing Top Detected, Allowed, Blocked and Destinations. — Zenarmor Threat Dashboard.

OPNsense Zenarmor Master Setup Guide: Layer 7 WAF Deep-Dive

Secure your OPNsense firewall with next-gen threat protection. Configure Zenarmor Layer 7 filtering & WAF in detail.