Live-verification found two real inaccuracies: WAN now passes 4 things inbound (NetBird's STUN forward was added, undocumented), and the "third fix" LAN-to-LAN narrative credited pfSense's ruleset when the actual enforcement for host-to-host traffic is each host's own firewalld (pfSense never sees same-subnet traffic on this flat LAN). Refreshed the WAN rules screenshot and reworded the boundary table + narrative to match. Also cleaned up the "Other Six Traffic Laws" table formatting per feedback. Co-Authored-By: Claude Sonnet 5 <[email protected]>
102 KiB
1897x682px
102 KiB
1897x682px