ALIEN IT SOLUTIONS

Same home.
Different protection.

Watch the same devices make the same connections. Change the protection to see what stops and what still works.

A simulation. Nothing on your own network is scanned or changed.

Explore individual rules and local versus cloud storageOptional detail: VLANs, gateway services, NAS and backups +

Explore the house

What should get through?

These are example rules, not changes to your router. All results are simulated.

Four VLANs · click a device to exploreEXAMPLE HOME

Swipe the full map to explore each room.

Your example home networkPhones and laptops sit in trusted Wi-Fi. The TV, printer and camera sit in a smart-device network. A router connects networks, Pi-hole answers DNS questions, and a local recorder stores camera video. PERSONAL · VLAN 10Phones & computers SMART DEVICES · VLAN 20Membership is not a firewall rule GUESTS · VLAN 40 LOCAL SERVICES · VLAN 30Your storage & supporting services Local connection
Allowed path×Stopped hereDot = a sample connection

Result with these rules

Follow the decisions

Inside this connection

An explanatory sequence, not the gateway's literal internal packet-processing order.

    Try this at home:

    Can my phone still control the TV?

    What this shows: an approved local session and its replies can work across the boundary.

    What it does not mean: that "isolated" blocks every direction, or that casting works without discovery rules.

    Can the camera record without internet?

    What this shows: its approved path to a local recorder still works.

    What it does not mean: that every camera supports local recording, or that cloud alerts will keep working.

    Why didn't Pi-hole stop that address?

    What this shows: a direct-IP attempt has no DNS lookup; an internet-access rule can stop it.

    What it does not mean: that Pi-hole is a firewall, or that it observes every connection.

    Why can the TV stream but not send this telemetry?

    What this shows: different example names receive different DNS decisions.

    What it does not mean: that wanted and unwanted traffic always use different names.

    The gateway raised an alert. Did it stop the traffic?

    What this shows: IDS reports; IPS can block a recognised matching pattern.

    What it does not mean: that every alert blocked something, or that every attack has a recognisable signature.

    The AI website was allowed. Was my document protected?

    What this shows: the chosen service receives material sent to it.

    What it does not mean: that a network allow rule decides whether sharing that material is appropriate.

    One gateway. Different jobs.

    Open the service tray.

    Select a service to see what it does, and which job belongs somewhere else.

    Before you buy another box

    Three things worth knowing.

    Pick an answer. The explanation matters more than the guess.

    Take one useful step

    A plan for
    your kind of home.

    Select what you use. Get a short list of things to check, starting with account security and updates.

    What do you use?

    Your choices stay in this page. Reloading clears them. No account, email address or device scan is needed.

      This is a checklist of actions you can take. It cannot measure how private or secure your home is.

      Go deeper

      The guides behind these rules

      How this demo works, and where the advice comes from

      This is an educational model of chosen connection paths. It does not scan your network, change router settings, contact the example destinations or generate actual attacks. A moving dot represents a connection attempt, rather than a literal packet capture. DNS lookups and application traffic are separate; the diagram highlights Pi-hole only for the DNS question.

      Local examples assume approved services and discovery rules. Firewall state allows replies to an approved session. IoT-to-trusted examples mean new connections. Internet blocks assume local-capable cameras and printers. IPv6, encrypted DNS, VPNs, traffic within the same network and exact gateway processing need real configuration and testing.

      This page uses its own local code and system fonts. This page's own code loads no analytics and saves none of your choices. Links below open the cited websites only when you choose them. The site's host adds one small script to every page on alienit.com.au that counts page views. It is not tied to anything you do in this demo.

      Technical references checked 9 September 2026. The examples and guided experiments are authored teaching material, not observations from the owner's home.

      For the TV and AI checklist: Roku's US viewing-recognition example and OAIC guidance on selecting and using AI. Your product and region may differ.