Segmented Cybersecurity Homelab on plumy devlog https://plumy.me/homelab/ Recent content in Segmented Cybersecurity Homelab on plumy devlog Hugo en-US Tue, 02 Jun 2026 00:00:00 +0300 Homelab Part 11: Final pfSense Firewall Rules and Segmentation Hardening https://plumy.me/homelab/part-11/ Tue, 02 Jun 2026 00:00:00 +0300 https://plumy.me/homelab/part-11/ I replace build-phase allow-any rules with explicit pfSense firewall policy for malware isolation, Windows clients, containers, honeypots, pentest access, and management paths. Homelab Part 10: Active Directory, DNS, DHCP, and Domain Join https://plumy.me/homelab/part-10/ Sun, 31 May 2026 00:00:00 +0300 https://plumy.me/homelab/part-10/ I add Windows Server 2022 as a domain controller, DNS and DHCP server, move DHCP behind pfSense relay, and join a Windows client to ad.plumy.lab. Homelab Part 9: Malware Analysis Segment with FLARE-VM and REMnux https://plumy.me/homelab/part-9/ Fri, 29 May 2026 12:00:00 +0300 https://plumy.me/homelab/part-9/ I build an isolated malware-analysis segment with FLARE-VM, REMnux, Proxmox disk import, boot-order fixes, and planned INetSim validation. Homelab Part 8: Tailscale Remote Access Behind CGNAT https://plumy.me/homelab/part-8/ Fri, 29 May 2026 00:00:00 +0300 https://plumy.me/homelab/part-8/ I use Tailscale for remote access behind CGNAT, advertise the lab prefix from pfSense, fix stale routes, and add Proxmox out-of-band access. Homelab Part 7: Snort IDS and T-Pot Honeypot Telemetry https://plumy.me/homelab/part-7/ Thu, 28 May 2026 12:00:00 +0300 https://plumy.me/homelab/part-7/ I add Snort IDS on pfSense, deploy T-Pot in the honeypot VLAN, forward honeypot logs into Wazuh, and fix decoder and query problems. Homelab Part 6: Wazuh SIEM Foundation https://plumy.me/homelab/part-6/ Thu, 28 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-6/ I stand up Wazuh in the SIEM VLAN, add the Docker host agent, enable Docker telemetry, and forward pfSense logs over syslog. Homelab Part 5: Kali and Metasploitable Target Access https://plumy.me/homelab/part-5/ Mon, 25 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-5/ I add the first attacker and target machines, import Metasploitable into Proxmox, install Kali, and validate access inside VLAN 40. Homelab Part 4: Docker Host, Portainer, and Macvlan https://plumy.me/homelab/part-4/ Sun, 24 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-4/ I build the container platform in VLAN 30 with Ubuntu Server, Docker, Portainer, macvlan networking, and n8n. Homelab Part 3: VLAN Segmentation and Initial DHCP https://plumy.me/homelab/part-3/ Thu, 21 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-3/ I define pfSense VLANs, assign gateway IPs, enable early DHCP, and keep temporary allow rules separate from the final firewall policy. Homelab Part 2: Alpine Jumpbox and pfSense Access https://plumy.me/homelab/part-2/ Wed, 20 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-2/ I add a small Alpine jumpbox, fix early DHCP and DNS issues, and reach the pfSense web UI through SSH forwarding. Homelab Part 1: Proxmox and pfSense Foundation https://plumy.me/homelab/part-1/ Tue, 19 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-1/ I build the base of the lab with Proxmox, an internal VLAN-aware bridge, and a pfSense firewall VM.