# Documentation

Best-practice guides for common OPNsense firewall configuration tasks using the MCP server.

## Best Practices

| Guide | Description |
| --- | --- |
| [WhatsApp Calling](best-practices/voip-whatsapp.md) | Allow WhatsApp voice/video calls through a default-deny firewall using URL table aliases, port restrictions, and scoped rules with savepoint protection |
| [DDNS with Cloudflare](best-practices/ddns-cloudflare.md) | Configure Dynamic DNS with Cloudflare API Tokens, Interface checkip method, IPv6 EUI-64 addresses, and German ISP forced-disconnect scheduling |

## Contributing Guides

Want to add a best-practice guide? Each guide should:

1. Describe the problem clearly
2. Show the recommended firewall/network configuration
3. Include MCP tool examples (`opn_add_alias`, `opn_add_firewall_rule`, etc.)
4. Explain security considerations and what NOT to do
5. Include a verification workflow using MCP diagnostic tools
