mshillam
/
DBSN-Opnsense
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: mshillam:fef03222403926209d0bdf7705f1663fc7b20f57
Branches Tags
mshillam:master
...
compare: mshillam:eccbc46bfdd4121756ab4305d7add22286cc46c2
Branches Tags
mshillam:master

21 Commits
fef0322240 ... eccbc46bfd

Author SHA1 Message Date
Matthew Shillam eccbc46bfd /diag_backup.php made changes @ 2025-11-12T00:29:46.490000 (mshillam@192.168.100.72) 2025-11-12 00:29:46 +00:00
Matthew Shillam 41b06d164e /firewall_rules.php made changes @ 2025-11-11T21:49:13.400000 (mshillam@192.168.100.72) 2025-11-11 21:49:13 +00:00
Matthew Shillam b0c3a994c6 /firewall_nat_out.php made changes @ 2025-11-11T21:48:03.800000 (mshillam@192.168.100.72) 2025-11-11 21:48:04 +00:00
Matthew Shillam 157ab0395e /firewall_nat_out_edit.php made changes @ 2025-11-11T21:47:24.290000 (mshillam@192.168.100.72) 2025-11-11 21:47:24 +00:00
Matthew Shillam 4e54a44406 /firewall_nat_out_edit.php made changes @ 2025-11-11T21:46:49.710000 (mshillam@192.168.100.72) 2025-11-11 21:46:50 +00:00
Matthew Shillam fe2f1e1c08 /firewall_nat.php made changes @ 2025-11-11T21:43:29.140000 (mshillam@192.168.100.72) 2025-11-11 21:43:29 +00:00
Matthew Shillam 493202ef74 /firewall_nat.php made changes @ 2025-11-11T21:43:18.250000 (mshillam@192.168.100.72) 2025-11-11 21:43:18 +00:00
Matthew Shillam dd0018c5ee /firewall_nat.php made changes @ 2025-11-11T21:42:18.340000 (mshillam@192.168.100.72) 2025-11-11 21:42:18 +00:00
Matthew Shillam 7cc545ba68 /firewall_nat_edit.php made changes @ 2025-11-11T21:42:15.550000 (mshillam@192.168.100.72) 2025-11-11 21:42:16 +00:00
Matthew Shillam ac7dc7cd8b Firewall: NAT: Port Forward, toggle NAT rule @ 2025-11-11T21:38:06.110000 (mshillam@192.168.100.72) 2025-11-11 21:38:06 +00:00
Matthew Shillam 3e467cad52 /firewall_nat.php made changes @ 2025-11-11T21:37:15.180000 (mshillam@192.168.100.72) 2025-11-11 21:37:15 +00:00
Matthew Shillam 688a8a66d6 /api/dnsmasq/settings/set made changes @ 2025-11-11T21:34:15.850000 (mshillam@192.168.100.72) 2025-11-11 21:34:16 +00:00
Matthew Shillam 2c1dbc61e6 /api/dnsmasq/settings/set_host/2c038a07-37a8-4745-8d60-b5a6657fd15c made changes @ 2025-11-11T21:34:13.320000 (mshillam@192.168.100.72) 2025-11-11 21:34:13 +00:00
Matthew Shillam bd6f4804cf /api/dnsmasq/settings/set_host/2c038a07-37a8-4745-8d60-b5a6657fd15c made changes @ 2025-11-11T21:29:59.120000 (mshillam@192.168.100.72) 2025-11-11 21:29:59 +00:00
Matthew Shillam 096a91872f /api/dnsmasq/settings/add_host/ made changes @ 2025-11-11T21:12:53.320000 (mshillam@192.168.100.72) 2025-11-11 21:12:53 +00:00
Matthew Shillam f24f960383 /api/dnsmasq/settings/add_host/ made changes @ 2025-11-11T20:55:12.810000 (mshillam@192.168.100.72) 2025-11-11 20:55:13 +00:00
Matthew Shillam b48771c82e /api/dnsmasq/settings/add_host/ made changes @ 2025-11-11T18:15:54.440000 (mshillam@192.168.100.72) 2025-11-11 18:15:55 +00:00
Matthew Shillam efd9bc6a21 /firewall_nat_out_edit.php made changes @ 2025-11-11T18:06:31.320000 (mshillam@192.168.100.72) 2025-11-11 18:06:31 +00:00
Matthew Shillam 624366c21d /firewall_nat_out_edit.php made changes @ 2025-11-11T18:06:17.830000 (mshillam@192.168.100.72) 2025-11-11 18:06:18 +00:00
Matthew Shillam 841e99fb57 /api/firewall/alias/add_item/ made changes @ 2025-11-11T18:00:05.940000 (mshillam@192.168.100.72) 2025-11-11 18:00:06 +00:00
Matthew Shillam 954472e5d0 /api/unbound/settings/add_host_override/ made changes @ 2025-11-11T17:51:39.630000 (mshillam@192.168.100.72) 2025-11-11 17:51:40 +00:00
1 changed files with 279 additions and 118 deletions
Show Stats Expand all files Collapse all files

397
config.xml
View File

@ -129,7 +129,7 @@
<serialspeed>115200</serialspeed> <serialspeed>115200</serialspeed>
<primaryconsole>video</primaryconsole> <primaryconsole>video</primaryconsole>
<backup> <backup>
<git version="1.0.0" persisted_at="1762727671.64" description="Git Backup Settings"> <git version="1.0.0" persisted_at="1762907386.49" description="Git Backup Settings">
<enabled>1</enabled> <enabled>1</enabled>
<url>https://gitea.shillam.me.uk/mshillam/DBSN-Opnsense.git</url> <url>https://gitea.shillam.me.uk/mshillam/DBSN-Opnsense.git</url>
<branch>master</branch> <branch>master</branch>
@ -195,7 +195,7 @@
<virtual>1</virtual> <virtual>1</virtual>
</lo0> </lo0>
</interfaces> </interfaces>
<dnsmasq version="1.0.8" persisted_at="1762778862.64" description="Dnsmasq DNS and DHCP"> <dnsmasq version="1.0.8" persisted_at="1762896855.85" description="Dnsmasq DNS and DHCP">
<enable>1</enable> <enable>1</enable>
<regdhcp>0</regdhcp> <regdhcp>0</regdhcp>
<regdhcpstatic>0</regdhcpstatic> <regdhcpstatic>0</regdhcpstatic>
@ -410,6 +410,51 @@
<comments/> <comments/>
<aliases/> <aliases/>
</hosts> </hosts>
<hosts uuid="44dd820e-4a04-41fc-9389-df83e9e9840b">
<host>dx-three</host>
<domain/>
<local>1</local>
<ip>192.168.100.57</ip>
<cnames/>
<client_id/>
<hwaddr>9c:6b:00:8d:34:6b</hwaddr>
<lease_time>0</lease_time>
<ignore>0</ignore>
<set_tag/>
<descr>DX-THREE</descr>
<comments/>
<aliases/>
</hosts>
<hosts uuid="b49b1092-a6f4-45f2-9ce7-8833391b6aca">
<host>core-services</host>
<domain/>
<local>1</local>
<ip>192.168.100.65</ip>
<cnames/>
<client_id/>
<hwaddr>ac:e2:d3:03:7b:66</hwaddr>
<lease_time>0</lease_time>
<ignore>0</ignore>
<set_tag/>
<descr>Core Services ( Proxmox )</descr>
<comments/>
<aliases/>
</hosts>
<hosts uuid="2c038a07-37a8-4745-8d60-b5a6657fd15c">
<host>pbx-dbsn</host>
<domain/>
<local>1</local>
<ip>192.168.100.66</ip>
<cnames/>
<client_id>01:bc:24:11:7f:56:05</client_id>
<hwaddr>bc:24:11:7f:56:05</hwaddr>
<lease_time>0</lease_time>
<ignore>0</ignore>
<set_tag/>
<descr>PBX - DBSN ( CoreService )</descr>
<comments/>
<aliases/>
</hosts>
<dhcp_ranges uuid="d828196c-2a57-4417-a472-84c6e3114bba"> <dhcp_ranges uuid="d828196c-2a57-4417-a472-84c6e3114bba">
<interface>lan</interface> <interface>lan</interface>
<set_tag/> <set_tag/>
@ -446,7 +491,7 @@
<destination> <destination>
<any>1</any> <any>1</any>
</destination> </destination>
<descr>Hamachi test</descr> <descr>Hamachi Outbound NAT Rule !IMPORTANT</descr>
<category/> <category/>
<interface>wan</interface> <interface>wan</interface>
<tag/> <tag/>
@ -465,73 +510,42 @@
<sourceport/> <sourceport/>
<protocol>tcp/udp</protocol> <protocol>tcp/udp</protocol>
<updated> <updated>
<username>mshillam@192.168.100.57</username> <username>mshillam@192.168.100.72</username>
<time>1762782490.72</time> <time>1762884391.27</time>
<description>/firewall_nat_out_edit.php made changes</description>
</updated>
</rule>
<rule>
<source>
<network>192.168.100.66/32</network>
</source>
<destination>
<any>1</any>
</destination>
<descr>PBX DSUK Outbound NAT !IMPORTANT</descr>
<category/>
<interface>wan</interface>
<tag/>
<tagged/>
<poolopts/>
<poolopts_sourcehashkey/>
<ipprotocol>inet</ipprotocol>
<created>
<username>mshillam@192.168.100.72</username>
<time>1762897609.66</time>
<description>/firewall_nat_out_edit.php made changes</description>
</created>
<target>wanip</target>
<staticnatport>1</staticnatport>
<sourceport/>
<log>1</log>
<updated>
<username>mshillam@192.168.100.72</username>
<time>1762897644.24</time>
<description>/firewall_nat_out_edit.php made changes</description> <description>/firewall_nat_out_edit.php made changes</description>
</updated> </updated>
</rule> </rule>
</outbound> </outbound>
<rule>
<protocol>tcp</protocol>
<interface>wan</interface>
<category/>
<ipprotocol>inet</ipprotocol>
<descr>Web ( Nginx Proxy Manager ) Forward</descr>
<tag/>
<tagged/>
<poolopts/>
<associated-rule-id>nat_690f29a537bea0.40028877</associated-rule-id>
<target>192.168.100.159</target>
<local-port>HTTP_WEB_PORTS</local-port>
<source>
<any>1</any>
</source>
<destination>
<network>wanip</network>
<port>HTTP_WEB_PORTS</port>
</destination>
<updated>
<username>root@192.168.100.57</username>
<time>1762697974.45</time>
<description>/firewall_nat_edit.php made changes</description>
</updated>
<created>
<username>root@192.168.100.167</username>
<time>1762601381.23</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule>
<protocol>tcp</protocol>
<interface>wan</interface>
<category/>
<ipprotocol>inet</ipprotocol>
<descr/>
<tag/>
<tagged/>
<poolopts/>
<associated-rule-id>nat_690f34e3658270.34262404</associated-rule-id>
<log>1</log>
<target>192.168.100.167</target>
<local-port>1028</local-port>
<source>
<any>1</any>
</source>
<destination>
<network>wanip</network>
<port>1028</port>
</destination>
<updated>
<username>root@192.168.100.167</username>
<time>1762604259.42</time>
<description>/firewall_nat_edit.php made changes</description>
</updated>
<created>
<username>root@192.168.100.167</username>
<time>1762604259.42</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule> <rule>
<protocol>tcp</protocol> <protocol>tcp</protocol>
<interface>wan</interface> <interface>wan</interface>
@ -594,6 +608,98 @@
<description>/firewall_nat_edit.php made changes</description> <description>/firewall_nat_edit.php made changes</description>
</created> </created>
</rule> </rule>
<rule>
<protocol>udp</protocol>
<interface>wan</interface>
<category/>
<ipprotocol>inet</ipprotocol>
<descr>Port Forward PBX DSUK Core</descr>
<tag/>
<tagged/>
<poolopts/>
<associated-rule-id>nat_6913adb779de90.18187191</associated-rule-id>
<target>192.168.100.66</target>
<local-port>PBX_DSUK_PORTS</local-port>
<source>
<any>1</any>
</source>
<destination>
<network>wanip</network>
<port>PBX_DSUK_PORTS</port>
</destination>
<natreflection>purenat</natreflection>
<updated>
<username>mshillam@192.168.100.72</username>
<time>1762897335.50</time>
<description>/firewall_nat_edit.php made changes</description>
</updated>
<created>
<username>mshillam@192.168.100.72</username>
<time>1762897335.50</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule>
<protocol>tcp</protocol>
<interface>wan</interface>
<category/>
<ipprotocol>inet</ipprotocol>
<descr>Web ( Nginx Proxy Manager ) Forward</descr>
<tag/>
<tagged/>
<poolopts/>
<associated-rule-id>nat_690f29a537bea0.40028877</associated-rule-id>
<target>192.168.100.159</target>
<local-port>HTTP_WEB_PORTS</local-port>
<source>
<any>1</any>
</source>
<destination>
<network>wanip</network>
<port>HTTP_WEB_PORTS</port>
</destination>
<updated>
<username>root@192.168.100.57</username>
<time>1762697974.45</time>
<description>/firewall_nat_edit.php made changes</description>
</updated>
<created>
<username>root@192.168.100.167</username>
<time>1762601381.23</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule>
<protocol>tcp</protocol>
<interface>wan</interface>
<category/>
<ipprotocol>inet</ipprotocol>
<descr/>
<tag/>
<tagged/>
<poolopts/>
<associated-rule-id>nat_690f34e3658270.34262404</associated-rule-id>
<log>1</log>
<target>192.168.100.167</target>
<local-port>1028</local-port>
<source>
<any>1</any>
</source>
<destination>
<network>wanip</network>
<port>1028</port>
</destination>
<updated>
<username>root@192.168.100.167</username>
<time>1762604259.42</time>
<description>/firewall_nat_edit.php made changes</description>
</updated>
<created>
<username>root@192.168.100.167</username>
<time>1762604259.42</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule> <rule>
<protocol>tcp/udp</protocol> <protocol>tcp/udp</protocol>
<interface>wan</interface> <interface>wan</interface>
@ -863,6 +969,7 @@
<time>1762780398.17</time> <time>1762780398.17</time>
<description>/firewall_nat_edit.php made changes</description> <description>/firewall_nat_edit.php made changes</description>
</created> </created>
<disabled>1</disabled>
</rule> </rule>
</nat> </nat>
<filter> <filter>
@ -894,6 +1001,74 @@
<description>/firewall_rules_edit.php made changes</description> <description>/firewall_rules_edit.php made changes</description>
</created> </created>
</rule> </rule>
<rule uuid="e2f3af39-f1df-40ab-9ac4-8fea4bf1bad4">
<type>pass</type>
<associated-rule-id>nat_690f4d9a36d2c0.31897934</associated-rule-id>
<source>
<any>1</any>
</source>
<interface>wan</interface>
<statetype>keep state</statetype>
<protocol>tcp</protocol>
<ipprotocol>inet</ipprotocol>
<destination>
<address>192.168.100.148</address>
<port>MAIL_SMTP_PORTS</port>
</destination>
<log>1</log>
<descr>Outgoing SMTP Mail server Forward</descr>
<category/>
<created>
<username>root@192.168.100.167</username>
<time>1762610586.22</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule uuid="de4fe09a-c7c7-4066-b67b-5afda664796a">
<type>pass</type>
<associated-rule-id>nat_6910a1fa4cbdb4.99664181</associated-rule-id>
<source>
<any>1</any>
</source>
<interface>wan</interface>
<statetype>keep state</statetype>
<protocol>tcp</protocol>
<ipprotocol>inet</ipprotocol>
<destination>
<address>192.168.100.27</address>
<port>FTP_BACKUP_SERVER_PORTS</port>
</destination>
<log>1</log>
<descr>FTP Backup Server Forward</descr>
<category/>
<created>
<username>root@192.168.100.57</username>
<time>1762697722.31</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule>
<type>pass</type>
<associated-rule-id>nat_6913adb779de90.18187191</associated-rule-id>
<source>
<any>1</any>
</source>
<interface>wan</interface>
<statetype>keep state</statetype>
<protocol>udp</protocol>
<ipprotocol>inet</ipprotocol>
<destination>
<address>192.168.100.66</address>
<port>PBX_DSUK_PORTS</port>
</destination>
<descr>Port Forward PBX DSUK Core</descr>
<category/>
<created>
<username>mshillam@192.168.100.72</username>
<time>1762897335.50</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule uuid="a278ef29-268d-40b6-a9f3-1ab568b87645"> <rule uuid="a278ef29-268d-40b6-a9f3-1ab568b87645">
<type>pass</type> <type>pass</type>
<associated-rule-id>nat_690f29a537bea0.40028877</associated-rule-id> <associated-rule-id>nat_690f29a537bea0.40028877</associated-rule-id>
@ -939,29 +1114,6 @@
<description>/firewall_nat_edit.php made changes</description> <description>/firewall_nat_edit.php made changes</description>
</created> </created>
</rule> </rule>
<rule uuid="e2f3af39-f1df-40ab-9ac4-8fea4bf1bad4">
<type>pass</type>
<associated-rule-id>nat_690f4d9a36d2c0.31897934</associated-rule-id>
<source>
<any>1</any>
</source>
<interface>wan</interface>
<statetype>keep state</statetype>
<protocol>tcp</protocol>
<ipprotocol>inet</ipprotocol>
<destination>
<address>192.168.100.148</address>
<port>MAIL_SMTP_PORTS</port>
</destination>
<log>1</log>
<descr>Outgoing SMTP Mail server Forward</descr>
<category/>
<created>
<username>root@192.168.100.167</username>
<time>1762610586.22</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule uuid="c584346e-7e12-431b-b748-8bf6d93ede79"> <rule uuid="c584346e-7e12-431b-b748-8bf6d93ede79">
<type>pass</type> <type>pass</type>
<associated-rule-id>nat_69108c73ac4453.06876312</associated-rule-id> <associated-rule-id>nat_69108c73ac4453.06876312</associated-rule-id>
@ -1138,29 +1290,6 @@
<description>/firewall_nat_edit.php made changes</description> <description>/firewall_nat_edit.php made changes</description>
</created> </created>
</rule> </rule>
<rule uuid="de4fe09a-c7c7-4066-b67b-5afda664796a">
<type>pass</type>
<associated-rule-id>nat_6910a1fa4cbdb4.99664181</associated-rule-id>
<source>
<any>1</any>
</source>
<interface>wan</interface>
<statetype>keep state</statetype>
<protocol>tcp</protocol>
<ipprotocol>inet</ipprotocol>
<destination>
<address>192.168.100.27</address>
<port>FTP_BACKUP_SERVER_PORTS</port>
</destination>
<log>1</log>
<descr>FTP Backup Server Forward</descr>
<category/>
<created>
<username>root@192.168.100.57</username>
<time>1762697722.31</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule uuid="78c05168-4894-4593-8aea-a6ccb1c78cbb"> <rule uuid="78c05168-4894-4593-8aea-a6ccb1c78cbb">
<type>pass</type> <type>pass</type>
<ipprotocol>inet</ipprotocol> <ipprotocol>inet</ipprotocol>
@ -1232,6 +1361,7 @@
<time>1762780398.17</time> <time>1762780398.17</time>
<description>/firewall_nat_edit.php made changes</description> <description>/firewall_nat_edit.php made changes</description>
</created> </created>
<disabled>1</disabled>
</rule> </rule>
<bypassstaticroutes>yes</bypassstaticroutes> <bypassstaticroutes>yes</bypassstaticroutes>
</filter> </filter>
@ -1242,9 +1372,9 @@
<prefer>0.opnsense.pool.ntp.org</prefer> <prefer>0.opnsense.pool.ntp.org</prefer>
</ntpd> </ntpd>
<revision> <revision>
<username>mshillam@192.168.100.57</username> <username>mshillam@192.168.100.72</username>
<description>/firewall_nat_out.php made changes</description> <description>/diag_backup.php made changes</description>
<time>1762782492.54</time> <time>1762907386.49</time>
</revision> </revision>
<OPNsense> <OPNsense>
<OpenVPN version="1.0.1" persisted_at="1762600545.71" description="OpenVPN"> <OpenVPN version="1.0.1" persisted_at="1762600545.71" description="OpenVPN">
@ -1650,7 +1780,7 @@
<queues/> <queues/>
<rules/> <rules/>
</TrafficShaper> </TrafficShaper>
<unboundplus version="1.0.12" persisted_at="1762602079.57" description="Unbound configuration"> <unboundplus version="1.0.12" persisted_at="1762883499.63" description="Unbound configuration">
<general> <general>
<enabled>1</enabled> <enabled>1</enabled>
<port>53</port> <port>53</port>
@ -1729,7 +1859,20 @@
<enabled>0</enabled> <enabled>0</enabled>
</forwarding> </forwarding>
<dots/> <dots/>
<hosts/> <hosts>
<host uuid="7d5a7eb0-ad09-42fa-bf1c-69c3580d9373">
<enabled>1</enabled>
<hostname>npm</hostname>
<domain>dentalsupportuk.com</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>192.168.100.159</server>
<txtdata/>
<description>Nginx Proxy Manager</description>
</host>
</hosts>
<aliases/> <aliases/>
</unboundplus> </unboundplus>
<Firewall> <Firewall>
@ -1739,7 +1882,7 @@
<npt/> <npt/>
<onetoone/> <onetoone/>
</Filter> </Filter>
<Alias version="1.0.1" persisted_at="1762697918.17" description="Firewall aliases"> <Alias version="1.0.1" persisted_at="1762884005.94" description="Firewall aliases">
<geoip> <geoip>
<url/> <url/>
</geoip> </geoip>
@ -1799,6 +1942,24 @@
<categories/> <categories/>
<description>HTTP/s Web Ports</description> <description>HTTP/s Web Ports</description>
</alias> </alias>
<alias uuid="3966d67d-4809-4e27-bbed-284b2a78ed60">
<enabled>1</enabled>
<name>PBX_DSUK_PORTS</name>
<type>port</type>
<path_expression/>
<proto/>
<interface/>
<counters>0</counters>
<updatefreq/>
<content>5060
10000:10100</content>
<password/>
<username/>
<authtype/>
<expire/>
<categories/>
<description>DSUK PBX Ports</description>
</alias>
</aliases> </aliases>
</Alias> </Alias>
<Category version="1.0.0" persisted_at="1762698223.36" description="Firewall categories"> <Category version="1.0.0" persisted_at="1762698223.36" description="Firewall categories">