What non-gimmicky steps should I take to secure a Flint 2?

Hi all. I'm new to owning my own router and to LAN security, so I'm sure I don't know what I don't know. I'm betting this gets asked a lot, but didn't see common recommendations when searching (I might have missed them).

In a nutshell: to secure my LAN that runs some services on my NAS but has/needs no open ports, what should I do? On my Charter/Spectrum router, I had some security package that always showed "threats blocked," which I'm sure was BS. I bet I can do a better job.

Feel free to tell me to go read a thread or an article, as I will. Thanks!

Easy answer: You don't need anything if you did not change the default settings.

Long answer: Luci brute force protection - #15 by admon

Thanks. The only thing I changed was swapping in AdGuard Home for DNS. Running in Docker on my NAS as it looked like updating the built-in version is (your?) script-dependent. Doubtless works well, but docker was already sitting there.

I'll guess this doesn't change anything? Should I literally not use a firewall? pfSense or opnSense? I won't do it just to do it, but I'm almost... disappointed? :laughing: