Firewall
Firewall Rules
| Allow all from LAN to WAN | ||||
| Allow some (egress filtering) from LAN to WAN | ||||
| Block all from WAN to LAN | ||||
| Allow HTTP from LAN to DMZ | ||||
| Allow HTTP from WAN to DMZ | ||||
| Block all from DMZ to LAN |
a
b
c
d
Quellen/source:
- opnSense | Docs » Firewall » Rules
-
-
-
-
opnSense | HAProxy
Add a comment
OPNsense GUI - System -> Settings -> Administration
Add a comment
opnSense | DLNA propacation
Quellen/Source:
- dlna wiki Page
- wombat Plex | needed Ports
- opnSense forum | DLNA propacation
- wombat Philips 32PFK5300
-
-
-
-
-
-
- Add a comment
Quellen/Source:
- dlna wiki Page
- wombat Plex | needed Ports
- opnSense forum | DLNA propacation
- wombat Philips 32PFK5300
-
-
-
-
-
-
- Add a comment
opnSense | UPC/USV | NUT
Source/Quellen:
- opnSense | Forum | Nut for APC Pro 900
-
-
-
-
-
-
-
-
-
-
opnSense | with AP (UniFi AP AC-PRO) with Radius (opnSense) identification
Quellen/Source:
- opnSense Documentation | FreeRadius Installation
- opnSense Forum | request because of the login
-
-
-
-
-
-
-
opnSense | VPN einrichten mit openVPN
Quellen/Source:
-
-
-
- YouTube | Thomas-Krenn | OPNsense für Anwender – Wie Sie mit VPN sichere Netzwerkzugänge einrichten
- opnSense wiki | Setup SSL VPN Road Warrior
-
-
-
-
- forum.opnsense | can't add Client in FreeRadius, no information in Log
- forum.opnsense | best Practice? - openVPN connection file for different user
- forum.opnsense | openVPN connection ok, but no access to LAN
-
opnSense | with built-inWLAN (wle200nx) with Radius identification
Quellen/Source:
- opnSense wiki | FreeRADIUS - Installation
- opnSense wiki | Access / Servers / Radius
-
-
-
-
-
-
-
-
-
-
- Add a comment
Quellen/Source:
- opnSense wiki | FreeRADIUS - Installation
- opnSense wiki | Access / Servers / Radius
-
-
-
-
-
-
-
-
-
-
- Add a comment
Free IPA |
-
-
- - - -
Quellen/Source:
- needed Ports for FreeIPA
-
- Add a comment
| steps |
On IPA serverIPA uses the following ports to communicate with its services: |
||
| TCP ports: 80, 88, 443, 389, 636, 88, 464, 53, 135, 138, 139, 445, 1024-1300 | |||
| UDP ports: 88, 464, 53, 123, 138, 139, 389, 445 | |||
-
- - - -
Quellen/Source:
- needed Ports for FreeIPA
-
- Add a comment
Add WLAN Interface (IP Adressen entsprechend anpassen)
OpnSense Version
OPNsense 17.7.12-amd64
FreeBSD 11.0-RELEASE-p17
LibreSSL 2.6.4
| Interface - Wireless - Device | +add [Description] |
||
| Interface - Assignments | select network Port and Press + select the Interface Name crated |
||
| General configuration Enable Interface Descritpion [WLAN] IPv4 Configuration Type [static IPv4] |
|||
| Static IPv4 configuration IPv4 address [10.20.20.1]/24 |
|||
|
Common wireless configuration - |
|||
| Network-specific wireless configuration Mode [Access Point] SSID [name des Signal] WPA [x] Enable WPA WPA Pre-Shared Key [passowrt] WPA Mode [WPA2] |
|||
| save & Apply Changes | |||
| System - Gateways - All | +add gateway Interface [WLAN] Name [GW_WLAN] |
||
| Services - DHCP - Server (Select the WLAN Tab)!!! |
Enable [x] Range add from to DNS Server [add IP] |
---
Subcategories
OPNSense Article Count: 12
- Anker 575 USB-C Docking Station (13-in-1), 85W für Laptops
- Perfect Server Hardware for Virtualization | Proxmox | pve-05
- Pioneer Blu-Ray/BD/DVD/CD Reader/writer USB 3.0 BDR-XD07TB | WORKS OK with Debian 11
- NOT WORKING WITH DEBIAN 11 | Dockingstation | IcyBox 14-in-1 USB Type-C | IB-DK2262AC
- How to remove systemd services
- Laptop | Lenovo | Thinkpad E15 Gen3 AMD
- Laptop | Lenovo | LENOVO-IDEA IdeaPad 3 15IGL05 Notebook (15.6 ", 128 GB SSD, Business Black)
- D. Klimo | Kent monoblocks
- TTN Mapper
- LILYGO TTGO T-Beam V1.1 ESP32 LoRa 868Mhz GPS 18650 Board
- LILYGO® TTGO T-Beam 868MHz -> The Things Network (TTN/TTS) -> Karte | Infos und Video bei Alex (www.aeq-web.com)
- Kabelfarben 3.3V, 5V, 12V, 230V | Durchmesser
- 01 Digi-Bee Stand01 Wetter
- Solar Panel | 6V 3W Solar Panel JY D145x145
- TTGO LoRa32 V2.1_1.6 version 433/868/915Mhz ESP32 LoRa OLED 0.96 Inch SD Card Bluetooth WIFI wireless Module ESP-32 SMA
- -pve-04 | Disk SSD and HDD
- DISK SSD | 1 TB | Samsung SSD 870 EVO 1TB - 1TB
- NanoVNA V2
- CubeSat | antennas |
- KoZo_GS3_433MHz
- tinyGS - shortcut what it means
- TinyGS Telegram community | published Links
- Wolfgang W. Osterhage (Springer Verlag Sachbuch 2021): Die Geschichte der Raumfahrt | (gefundene Fehler)
- ucs Univention some commands
- SMA-Stecker / SMA-Buchse
RSS Feed
Warning: Invalid argument supplied for foreach() in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 39
Warning: Invalid argument supplied for foreach() in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 39
-
Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability
Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability
<p>A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. </p> <p>This vulnerability is[…]
Source: Cisco Security Advisory
Created on: 14.11.2024 | 00:00
Cisco Security Advisory | 14.11.2024 | 00:00 -
Sicherheitsupdates: Zoom Room Client & Co. angreifbar
Sicherheitsupdates: Zoom Room Client & Co. angreifbar
Die Entwickler rüsten verschiedene Zoom-Apps gegen mögliche Angriffe. Davon sind unter anderem macOS und Windows betroffen.
Source: Security-Alert Meldungen
Created on: 13.11.2024 | 15:26
Security-Alert Meldungen | 13.11.2024 | 15:26 -
Fortinet stopft Sicherheitslecks in FortiOS, FortiAnalyzer und FortiClient
Fortinet stopft Sicherheitslecks in FortiOS, FortiAnalyzer und FortiClient
Sicherheitslücken in FortiClient für Windows, FortiAnalyzer und FortiOS machen die Systeme anfällig für Angriffe. Updates stehen bereit.
Source: Security-Alert Meldungen
Created on: 13.11.2024 | 14:00
Security-Alert Meldungen | 13.11.2024 | 14:00 -
Neuer Mathe-Benchmark lässt führende KIs scheitern
Neuer Mathe-Benchmark lässt führende KIs scheitern
Das Forschungsinstitut Epoch AI hat mit FrontierMath einen neuen Benchmark vorgestellt, an dem führende Systeme wie Claude 3.5 Sonnet, GPT-4o, o1-preview oder Gemini 1.5 Pro reihenweise…
Source: Linux-Magazin
Created on: 13.11.2024 | 11:03
Linux-Magazin | 13.11.2024 | 11:03 -
KubeCon: Suse stellt AI-Plattform vor
KubeCon: Suse stellt AI-Plattform vor
Suse hat bei der KubeCon North America 2024 in Salt Lake City Suse AI vorgestellt.
Source: Linux-Magazin
Created on: 13.11.2024 | 10:14
Linux-Magazin | 13.11.2024 | 10:14 -
Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
<p>A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. </p> <p>This vulnerability exists because ACL[…]
Source: Cisco Security Advisory
Created on: 7.11.2024 | 09:00
Cisco Security Advisory | 7.11.2024 | 09:00 -
Proxmox at Open Source Summit 2024 in Vienna
Proxmox at Open Source Summit 2024 in Vienna
Source: Announcements
Created on: 4.09.2024 | 15:01
Announcements | 4.09.2024 | 15:01 -
Official Proxmox Security Advisories Forum Available
Official Proxmox Security Advisories Forum Available
Source: Announcements
Created on: 26.06.2024 | 17:22
Announcements | 26.06.2024 | 17:22
neusten Links
Warning: count(): Parameter must be an array or an object that implements Countable in /var/www/clients/client2/web2/web/j/modules/mod_quicklistweblinks/helper.php on line 78
many More Links »
part of ...
