commit 79297913cfd321c37afcca9eb5ebfd759f0dfea3 Author: Matthew Shillam Date: Fri Jan 14 00:40:07 2022 +0000 /diag_backup.php made changes @ 2022-01-14T00:40:07.830300 (mshillam@192.168.1.10) diff --git a/config.xml b/config.xml new file mode 100644 index 0000000..fa690c1 --- /dev/null +++ b/config.xml @@ -0,0 +1,3984 @@ + + + mats + + + Disable the pf ftp proxy handler. + debug.pfftpproxy + default + + + Increase UFS read-ahead speeds to match current state of hard drives and NCQ. More information here: http://ivoras.sharanet.org/blog/tree/2010-11-19.ufs-read-ahead.html + vfs.read_max + default + + + Set the ephemeral port range to be lower. + net.inet.ip.portrange.first + default + + + Drop packets to closed TCP ports without returning a RST + net.inet.tcp.blackhole + default + + + Do not send ICMP port unreachable messages for closed UDP ports + net.inet.udp.blackhole + default + + + Randomize the ID field in IP packets (default is 0: sequential IP IDs) + net.inet.ip.random_id + default + + + + Source routing is another way for an attacker to try to reach non-routable addresses behind your box. + It can also be used to probe for information about your internal networks. These functions come enabled + as part of the standard FreeBSD core system. + + net.inet.ip.sourceroute + default + + + + Source routing is another way for an attacker to try to reach non-routable addresses behind your box. + It can also be used to probe for information about your internal networks. These functions come enabled + as part of the standard FreeBSD core system. + + net.inet.ip.accept_sourceroute + default + + + + Redirect attacks are the purposeful mass-issuing of ICMP type 5 packets. In a normal network, redirects + to the end stations should not be required. This option enables the NIC to drop all inbound ICMP redirect + packets without returning a response. + + net.inet.icmp.drop_redirect + default + + + + This option turns off the logging of redirect packets because there is no limit and this could fill + up your logs consuming your whole hard drive. + + net.inet.icmp.log_redirect + default + + + Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway) + net.inet.tcp.drop_synfin + default + + + Enable sending IPv4 redirects + net.inet.ip.redirect + default + + + Enable sending IPv6 redirects + net.inet6.ip6.redirect + default + + + Enable privacy settings for IPv6 (RFC 4941) + net.inet6.ip6.use_tempaddr + default + + + Prefer privacy addresses and use them over the normal addresses + net.inet6.ip6.prefer_tempaddr + default + + + Generate SYN cookies for outbound SYN-ACK packets + net.inet.tcp.syncookies + default + + + Maximum incoming/outgoing TCP datagram size (receive) + net.inet.tcp.recvspace + default + + + Maximum incoming/outgoing TCP datagram size (send) + net.inet.tcp.sendspace + default + + + Do not delay ACK to try and piggyback it onto a data packet + net.inet.tcp.delayed_ack + default + + + Maximum outgoing UDP datagram size + net.inet.udp.maxdgram + default + + + Handling of non-IP packets which are not passed to pfil (see if_bridge(4)) + net.link.bridge.pfil_onlyip + default + + + Set to 1 to additionally filter on the physical interface for locally destined packets + net.link.bridge.pfil_local_phys + default + + + Set to 0 to disable filtering on the incoming and outgoing member interfaces. + net.link.bridge.pfil_member + default + + + Set to 1 to enable filtering on the bridge interface + net.link.bridge.pfil_bridge + default + + + Allow unprivileged access to tap(4) device nodes + net.link.tap.user_open + default + + + Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid()) + kern.randompid + default + + + Maximum size of the IP input queue + net.inet.ip.intr_queue_maxlen + default + + + Disable CTRL+ALT+Delete reboot from keyboard. + hw.syscons.kbd_reboot + default + + + Enable TCP extended debugging + net.inet.tcp.log_debug + default + + + Set ICMP Limits + net.inet.icmp.icmplim + default + + + TCP Offload Engine + net.inet.tcp.tso + default + + + UDP Checksums + net.inet.udp.checksum + default + + + Maximum socket buffer size + kern.ipc.maxsockbuf + default + + + + conservative + hellfire + home + + admins + System Administrators + system + 1999 + 0 + 2000 + user-shell-access + page-all + + + root + System Administrator + system + admins + $2b$10$fEJUP7gNN.UAaGQIL1zyKeuviU4nAFIfrOH9BlU83MiQxXXACEDOm + 0 + + c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUVjRmpLT0MrVFdMdXJVL3EvSlFVYk1QMEFmTmFVVFdXWGUyenk4QkRzMnYgbWF0dGhld0BzaGlsbGFtLm1lLnVr + + + + + $2y$10$5Slr/aP9jkfFVhcZ8ESpau6AuvXbthuNpKOXOVh7GbEqnDk3SINCW + user + mshillam + Matthew Shillam + + c3NoLWVkMjU1MTkgQUFBQUMzTnphQzFsWkRJMU5URTVBQUFBSUVjRmpLT0MrVFdMdXJVL3EvSlFVYk1QMEFmTmFVVFdXWGUyenk4QkRzMnYgbWF0dGhld0BzaGlsbGFtLm1lLnVr + + + matthew@shillam.me.uk + 2000 + 5a75bd345a2ac + /bin/csh + + + $2y$10$/OwZwl6x4KSv7Dy88C1Vf.fAS98kQy7nEyKLTwx913DlsSQOQIcm6 + user + homeassistant + Home Assistant + + + + + 2001 + + + dl9j7B6Qc9oNA7KesEGNm7UKb5WX7N+f/e0wOV2cDo7HYLwNAg2QC05uxy9+XqXdmZAlB1/nwpjYjrCx + $6$$.sQAwbMl0hDQdkyM0JIPxLWc8LLd8npnZ.6ddC2VhghMiRR9x0u5XDLJ6EqnJ0HYo25.FuH0cCrN4IWOmiohL1 + + + + 2002 + 2000 + Europe/London + 0.opnsense.pool.ntp.org 1.opnsense.pool.ntp.org 2.opnsense.pool.ntp.org 3.opnsense.pool.ntp.org + + http + 6076e25ed3bf1 + + + + + Local Database + + 1 + 1 + 1 + 1 + hadp + hadp + hadp + + monthly + + 1 + 60 + 1 + 1 + en_US + 1.1.1.1 + 1.0.0.1 + 8.8.8.8 + 8.8.4.4 + 1 + none + none + none + none + none + none + none + none + basic + + + + + + + 1 + https://nextcloud.nabble.co.uk + mshillam + a8r67h3XXiuB4Y + + OPNsense-Backup + + + 1 + https://gitea.shillam.me.uk/mshillam/hellfire.git + master + + mshillam + TWi7mE9rrxzXam + + + yes + 115200 + video + + 1 + + + + + + enabled + 1 + admins + + 1 + + + + os-sunnyvalley,os-sensei,os-redis,os-ntopng,os-theme-rebellion,os-theme-vicuna,os-theme-cicada,os-speedtest-community,os-sensei-updater,os-zabbix-agent,os-upnp,os-git-backup + + + aesni + + + + igb0 + + 1 + + 192.168.0.1 + 16 + + + 1 + Loopback + 1 + lo0 + 127.0.0.1 + ::1 + 8 + 128 + none + 1 + + + igb1 + + 1 + + 1 + 1 + dhcp + + + 32 + + + + + + + + SavedCfg + + + + + + + + + + + + 1 + hmac-md5 + + + + + 192.168.250.1 + 192.168.250.254 + + + + + + 9c:c9:eb:d6:da:a6 + 192.168.0.3 + ng-sw-8p-bedroom + Netgear 8 Port Switch Bedroom - GS308T + + + + + + a0:63:91:b7:e2:14 + 192.168.0.4 + ng-sw-24p-office + Netgear 24 Port Switch - Office - GS724Tv4 + + + + + + 42:4c:fa:d9:11:0e + 192.168.0.21 + zabbix + Zabbix Monitoring + + + + + + 7a:fd:90:ae:6b:e5 + 192.168.0.30 + docker + Docker test system + + + + + + 66:48:46:cb:a3:08 + 192.168.0.31 + cloudserver + Cloudserver.io Web hosting + + + + + + 46:0e:b7:b7:39:c5 + 192.168.0.32 + fastpanel + + + + + + da:c7:4a:53:59:fb + 192.168.0.33 + git + + + + + + ee:e6:5b:54:ce:b1 + 192.168.0.40 + mail + Mailcow Docker deployment + + + + + + a2:c1:4a:ca:c9:1d + 192.168.0.41 + vitalpbx + + + + + + 88:66:5a:15:8a:9a + 192.168.1.10 + MatBook-Pro + New Macbook Pro 16" + + + + + + 80:2a:a8:89:1b:0a + 192.168.2.2 + unifi-ap2 + Shed + + + + + + 80:2a:a8:49:cd:f4 + 192.168.2.3 + unifi-ap + Ubiquiti Access Point + 1 + + + + + + 44:d2:44:25:f9:47 + 192.168.2.5 + epson-xp-790 + Epson XP790 Printer + + + + + + b8:e8:56:46:70:50 + 192.168.2.6 + nikita-macbook + Nikitas Macbook Pro + + + + + + cc:44:63:93:53:83 + 192.168.2.7 + mat-ipad-pro + Mats iPad Pro + + + 80:b0:3d:ea:e3:7a + 192.168.2.8 + mat-iphone-x + Mats iPhone X + + + + + + 1c:36:bb:7d:8a:c0 + 192.168.2.9 + mat-apple-watch-v3 + Mats Apple watch v3 + + + + + + b8:09:8a:c0:83:ad + 192.168.2.10 + mat-imac-sophys-room + Mats iMac 5k - Sophys room + + + + + + d0:3f:aa:1e:28:4f + 192.168.2.11 + mats-iphone-11-pro + Mats iPhone 11 Max Pro + + + + + + b8:09:8a:44:71:1f + 192.168.2.12 + mat-hackintosh + Mats hackintosh + + + + + + c0:a5:3e:e3:71:f5 + 192.168.2.20 + katie-apple-watch-v3 + Katies Apple watch v3 + + + + + + 84:ad:8d:bf:12:4a + 192.168.2.21 + katie-iphone-x + Katies iPhone X + + + + + + bc:09:63:95:eb:84 + 192.168.2.22 + katie-iphone-11-pro-2 + + + + + + 74:75:48:22:b8:0d + 192.168.2.31 + firetv-bedroom + Fire TV Bedroom + + + cc:b1:1a:a5:15:c6 + 192.168.2.32 + samsung-tv-downstairs + Samsung TV downstairs + + + + + + 10:09:f9:7a:c1:57 + 192.168.2.33 + firetv-cube-front-room + FireTv Cube - Front Room + + + + + + 1c:9e:46:08:a1:25 + 192.168.2.40 + jessica-ipad-mini + Jessicas iPad Mini + + + c0:d0:12:9b:d2:e3 + 192.168.2.41 + jessica-iphone-7 + Jessicas iPhone 7 + + 1 + + + + + + 68:db:f5:bc:0d:b9 + 192.168.2.42 + jessica-echo-dot + Jessicas Echo Dot + + + + + + a0:02:dc:79:4b:50 + 192.168.2.43 + jessica-fire-tv + + + + + + fa:80:c0:9c:05:63 + 192.168.2.44 + savannah-phone + + + + + + 42:a1:19:f7:55:36 + 192.168.2.50 + david-ipad + Davids iPad + + + + + + 40:83:1d:67:b9:34 + 192.168.2.51 + david_iphone_7_plus + Davids iPhone 7 + + + + + + + 08:12:a5:40:1a:1c + 192.168.2.52 + david-echo-dot + Davids Echo dot + 1 + + + + + + da:e7:32:78:34:a0 + 192.168.2.53 + david-iphone-11 + + + + + + 74:df:bf:64:83:87 + 192.168.2.61 + nikita-laptop + Nikita Ideapad Lenovo Laptop + + + + + + bc:fe:d9:82:78:69 + 192.168.2.62 + nick-iphone + Nicks iPhone + 1 + + + + + + 40:83:1d:4f:3c:b4 + 192.168.2.64 + nikita-new-iphone + Nikitas New Phone + + + 60:5b:b4:8f:77:07 + 192.168.2.65 + nikita-ps4 + Nikitas PS4 + + + + + + 30:9c:23:64:61:f4 + 192.168.2.66 + nikita-pc + Nikitas NEW PC + + + + + + 78:88:6d:7f:5d:f8 + 192.168.2.70 + sophy-iphone + Sophys iPhone + + + + + + 14:cc:20:27:fb:44 + 192.168.2.73 + tplink-usb + USB TPlink Wifi + + + + + + f4:06:16:7f:d0:da + 192.168.2.87 + iPhone + albert-iphone-xr + + + + + + 28:c5:38:84:28:ae + 192.168.2.94 + Louis-iPhone + Louis iPhone 13 Pro Max + + + + + + f0:08:d1:d3:f9:bc + 192.168.2.100 + esp_office_propagator + ESp32_1 Office Propagator + + + + + + dc:4f:22:7a:de:02 + 192.168.2.110 + inkbird1 + Inkbird Controller 1 + + + + + + 84:d8:1b:8b:68:be + 192.168.2.111 + tp-link-smart-3way-1 + TP Link Smart 3way switch - 1 + + + + + + b4:85:e1:1c:a3:91 + 192.168.3.4 + katie-iphone-12 + Katies iPhone 12 ( White ) + + + + + + be:9f:bc:a8:a4:0e + 192.168.10.1 + kali + KaliLinux + + + + + + 10:52:1c:64:5b:18 + 192.168.32.2 + esp32_2 + ESP32 2 ( Shed staging area + + + + + + dc:4f:22:4d:9d:23 + 192.168.32.50 + dmxgo + + + + + + 84:f3:eb:64:8c:d3 + 192.168.32.101 + energy_1 + Energy socket 1 + + + + + + b4:e6:2d:1e:68:18 + 192.168.32.102 + energy_2 + Sheds Main heater socket for Stagins Area + + + + + + b4:e6:2d:1e:1e:84 + 192.168.32.103 + energy_3 + + + + + + bc:dd:c2:e3:52:ab + 192.168.32.104 + energy_4 + + + + + + 24:a1:60:17:02:29 + 192.168.32.105 + energy_5 + Energy 5 + + + + + + c4:dd:57:04:19:1f + 192.168.32.106 + energy_6 + + + + + + c4:dd:57:04:6c:61 + 192.168.32.107 + energy_7 + + + + + + 3c:61:05:12:ee:28 + 192.168.32.200 + esp32_poly + + + + + + 80:45:dd:46:00:69 + 192.168.32.211 + Sophy-Work-Laptop + + + + + + 00:e0:67:06:e1:90 + 192.168.32.250 + viperfire + + + + + + 44:8a:5b:58:29:d2 + 192.168.33.1 + albert-pc-2 + + + + + + 44:39:c4:3a:4f:2e + 192.168.50.1 + gandalf + Gandalf - Proxmox 1 + + + + + + 44:39:c4:50:2e:7f + 192.168.50.2 + golem + Proxmox 2 + + + + + + 44:39:c4:50:2b:5e + 192.168.50.3 + gumball + Gumball - Proxmox 3 + + + + + + 38:ea:a7:a1:04:6f + 192.168.50.100 + bilbo + TrueNas + 1 + + + + + + 74:ab:93:3f:0c:73 + 192.168.69.1 + blink-sync + + + + + + 74:ab:93:55:b0:d9 + 192.168.69.2 + blin-cam1 + + + + + + 62:0d:c3:83:cf:f0 + 192.168.100.1 + modem + modem + + + + + + ac:87:a3:21:9d:31 + 192.168.100.10 + iMat-5K + Mats iMac 5K + 1 + + + + + + ce:9b:5c:bc:1d:be + 192.168.100.13 + ha + HomeAssistant Proxmox + 1 + + + + + + b4:2e:99:a1:67:fa + 192.168.100.20 + mat-hackintosh + Mats Hackintosh + 1 + + + + + + bc:6e:76:01:97:a4 + 192.168.100.30 + cosy-heating + + + + + + 9c:b6:54:06:78:52 + 192.168.100.49 + media2 + Media 2 - ( GLUSTER ) + 1 + + + + + + 00:bb:3a:97:1b:1f + 192.168.100.50 + firetv-front-room + Front room FireTV + 1 + + + + + + b0:da:f9:52:7c:59 + 192.168.100.51 + virgin-media-tivo + Virgin Box + + + + + + 5c:49:7d:20:fd:58 + 192.168.100.52 + samsung-frontroom + Samsung TV front room + 1 + + + + + + 04:42:1a:95:50:52 + 192.168.100.60 + louis-pc + Louis PC + 1 + + + + + + 1c:1b:0d:e6:4f:6c + 192.168.100.61 + david-pc + Davids PC + 1 + + + + + + 1c:1b:0d:34:8c:b0 + 192.168.100.66 + jessica-pc + Jessicas PC + 1 + + + + + + 00:1c:bf:85:f7:ec + 192.168.100.67 + jesslaptop + + + + + + 0c:fe:45:63:29:c0 + 192.168.100.70 + nikita-ps4-wired + Nikitas PS4 Wired + 1 + + + + + + 04:d9:f5:1d:bd:3c + 192.168.100.80 + albert-pc + Alberts PC + + + + + + 2c:f0:5d:e4:da:a2 + 192.168.100.81 + alberts-ryzen-pc + Alberts Ryzen PC + + + + + + 2c:f0:5d:89:1c:f6 + 192.168.100.82 + albert-new-pc + Alberts new pc + + + + + + d8:bb:c1:45:b1:c0 + 192.168.100.83 + alberts-latest-pc + + + + + + 40:a2:db:13:a0:b5 + 192.168.100.84 + albert-firetv-cube + + + + + + 08:12:a5:42:d0:90 + 192.168.100.85 + jess-firetv-cube + + + + + + 0c:ee:99:61:03:5b + 192.168.100.86 + david-firetv-cube + + + + + + + + + 1 + + 1 + 1 + 1 + + ftp + mydentalbackup.co.uk + A + 192.168.0.32 + + + + + + + + + gandalf + shillam.me.uk + A + 192.168.0.30 + + + Gandalf Proxmox + + + + + + gitea + shillam.me.uk + A + 192.168.0.30 + + + Gitea Source control. + + + + + + golem + shillam.me.uk + A + 192.168.0.30 + + + Golem Proxmox + + + + + + gumball + shillam.me.uk + A + 192.168.0.30 + + + Gumball Proxmox + + + + + + ng-sw-8p-bedroom + shillam.me.uk + A + 192.168.0.30 + + + Netgear 8 Port Switch - Bedroom + + + + + + npm + shillam.me.uk + A + 192.168.0.30 + + + Nginx Proxy Manager + + + + + + voip + nabble.co.uk + A + 192.168.0.30 + + + voip + + + + + + zabbix + shillam.me.uk + A + 192.168.0.30 + + + Zabbix monitoring + + + + + + + + + + public + + + 1 + 1 + 1 + 1 + 1 + + + + hybrid + + + 192.168.0.41/32 + + + 1 + + + + wan + + + + + inet + + mshillam@192.168.2.6 + + /firewall_nat_out_edit.php made changes + + wanip + 1 + + 1 + + mshillam@192.168.1.10 + + /firewall_nat_out_edit.php made changes + + + + + tcp + inet + Home Assistant + + + + nat_603e4caf9744d4.12162657 + 192.168.100.13 + 8123 + + 1 + + + wanip + 8123 + + + mshillam@192.168.2.6 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.2.6 + + /firewall_nat_edit.php made changes + + + + tcp + inet + Home Assistant + + + + + 192.168.100.13 + 8123 + +
trading_view
+ + + wanip + 80 + + + mshillam@192.168.2.6 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.2.6 + + /firewall_nat_edit.php made changes + + 1 + + + tcp + wan + + inet + + + + + nat_61d0e26867ca51.69694975 + 192.168.0.30 + 443 + + 1 + + + wanip + 443 + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + tcp + wan + + inet + + + + + nat_61d0e2981ea0b4.36316537 + 192.168.0.30 + 80 + + 1 + + + wanip + 80 + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + tcp + wan + + inet + + + + + nat_61d9abe437c253.03770640 + 192.168.0.40 + MAIL_PORTS + + 1 + + + wanip + MAIL_PORTS + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + tcp/udp + wan + + inet + + + + + nat_61ddd885a87c13.07466954 + 192.168.0.41 + 5060 + + 1 + + + wanip + 5060-5082 + + purenat + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + udp + wan + + inet + + + + + nat_61ddd973cb6413.87351681 + 192.168.0.41 + 10000 + + 1 + + + wanip + 10000-20000 + + purenat + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + + + block + lan,wan + inet6 + keep state + Block all IPv6 and Do NOT log + any + yes + 1 + + 1 + + + 1 + + + mshillam@192.168.1.10 + + /firewall_rules_edit.php made changes + + + root@192.168.2.6 + + /firewall_rules_edit.php made changes + + + + pass + lan + inet + keep state + Allow all essential devices + in + yes + 1 + +
essential_devices
+ + + 1 + + + mshillam@192.168.1.10 + + /firewall_rules_edit.php made changes + + + mshillam@192.168.2.6 + + /firewall_rules_edit.php made changes + + + + pass + lan + inet + keep state + Allowing all Jessicas Devices + 8am_12pm_7days + any + yes + 1 + +
jessica_devices
+ + + 1 + + + mshillam@192.168.2.8 + + /firewall_rules_edit.php made changes + + + mshillam@192.168.2.6 + + /firewall_rules_edit.php made changes + + 1 + + + pass + lan + inet + keep state + Allowing all Davids Devices + 8am_12pm_7days + any + yes + 1 + 1 + +
david_devices
+ + + 1 + + + mshillam@192.168.1.10 + + /firewall_rules_edit.php made changes + + + mshillam@192.168.2.6 + + /firewall_rules_edit.php made changes + + + + pass + lan + inet + keep state + Default allow LAN to any rule + in + 1 + 1 + + lan + + + 1 + + + mshillam@192.168.1.10 + + /firewall_rules_edit.php made changes + + + + OpenVPN Remote My Dental Security Staf wizard + + 1 + + + 1 + + openvpn + pass + on + + root@192.168.2.6 + + /wizard.php made changes + + 1 + + + pass + wireguard + inet + keep state + WG WAN to LAN + in + 1 + +
WIREGUARD_CLIENTS
+ + + 1 + + + mshillam@192.168.100.20 + + /firewall_rules_edit.php made changes + + + mshillam@192.168.100.20 + + /firewall_rules_edit.php made changes + + + + + 1 + + wan + keep state + tcp + inet + +
192.168.0.30
+ 443 + + + + nat_61d0e26867ca51.69694975 + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + + 1 + + wan + keep state + tcp + inet + +
192.168.0.30
+ 80 + + + + nat_61d0e2981ea0b4.36316537 + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + + 1 + + wan + keep state + tcp + inet + +
192.168.0.40
+ MAIL_PORTS + + + + nat_61d9abe437c253.03770640 + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + + 1 + + wan + keep state + tcp/udp + inet + +
192.168.0.41
+ 5060-5082 + + + + nat_61ddd885a87c13.07466954 + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + + 1 + + wan + keep state + udp + inet + +
192.168.0.41
+ 10000-20000 + + + + nat_61ddd973cb6413.87351681 + + mshillam@192.168.1.10 + + /firewall_nat_edit.php made changes + + + + + + + + + ICMP + icmp + ICMP + + + + TCP + tcp + Generic TCP + + + + HTTP + http + Generic HTTP + + / + + 200 + + + + HTTPS + https + Generic HTTPS + + / + + 200 + + + + SMTP + send + Generic SMTP + + + 220 * + + + + + 0.opnsense.pool.ntp.org + + + interface_statistics-container:00000000-col1:show,system_information-container:00000001-col1:show,gateways-container:00000002-col2:show,interface_list-container:00000003-col2:show,dyn_dns_status-container:00000004-col2:show,traffic_graphs-container:00000005-col2:show,services_status-container:00000006-col4:show + 2 + + + mshillam@192.168.1.10 + + /diag_backup.php made changes + + + + + + + + 1 + lan + + + + + + + + + + 0 + wan + wan + + + + + 5060 + 7070 + 7089 + 300 + 46 + 0 + 0 + 0 + 0 + 600 + 500 + 20 + + 0 + 0 + 0 + + 1 + 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 + 1 + 217.0.23.100/32 + 1 + 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 + 0 + + + + + + + + + + + + + + + + + + + + + 1 + david_ipad + host + + 0 + + 192.168.2.50 + Davids iPad + + + 1 + david_pc + host + + 0 + + 192.168.100.61 + Davids PC + + + 1 + jessica_ipad_mini + host + + 0 + + 192.168.2.40 + Jessicas iPad mini + + + 1 + jessica_iphone_7 + host + + 0 + + 192.168.2.41 + Jessicas iPhone 7 + + + 1 + jessica_pc + host + + 0 + + 192.168.100.66 + Jessicas PC + + + 1 + louis_iphone_7 + host + + 0 + + 192.168.2.92 + Louis iPhone 7 + + + 1 + louis_pc + host + + 0 + + 192.168.100.60 + Louis PC + + + 1 + nikita_iphone_7 + host + + 0 + + 192.168.2.64 + Nikitas iPhone 7 + + + 1 + nikitas_laptop + host + + 0 + + 192.168.2.61 + Nikitas Laptop + + + 1 + unifi_ap_downstairs + host + + 0 + + 192.168.2.3 + Unifi Access point - Downstairs + + + 1 + canon_mg6600_printer + host + + 0 + + 192.168.2.4 + Canon Mg6600 Printer + + + 1 + matbook + host + + 0 + + 192.168.2.6 + Mats Macbook Pro + + + 1 + mat_ipad_pro + host + + 0 + + 192.168.2.7 + Mats iPad Pro + + + 1 + mat_iphone_x + host + + 0 + + 192.168.2.8 + Mats iPhone X + + + 1 + mat_apple_watch_v3 + host + + 0 + + 192.168.2.9 + Mats Apple watch v3 + + + 1 + mat_imac_5k_sophys_room + host + + 0 + + 192.168.2.10 + Mats iMac 5k -Sophys room + + + 1 + katie_apple_watch_v3 + host + + 0 + + 192.168.2.20 + Katies Apple watch v3 + + + 1 + katie_iphone_x + host + + 0 + + 192.168.2.21 + Katies iPhone X + + + 1 + fire_tv_front_room + host + + 0 + + 192.168.100.50 + Fire TV - Front Room + + + 1 + fire_tv_bedroom + host + + 0 + + 192.168.2.31 + Fire TV Bedroom + + + 1 + samsung_tv_front_room + host + + 0 + + 192.168.100.52 + Samsung TV - Front room + + + 1 + mat_hackintosh + host + + 0 + + 192.168.100.20 + Mats Hackintosh + + + 1 + media1 + host + + 0 + + 192.168.100.48 + Media 1 + + + 1 + media2 + host + + 0 + + 192.168.100.49 + Media 2 + + + 1 + essential_devices + host + + 0 + + unifi_ap_downstairs +canon_mg6600_printer +matbook +mat_ipad_pro +mat_iphone_x +mat_apple_watch_v3 +katie_apple_watch_v3 +katie_iphone_x +fire_tv_front_room +fire_tv_bedroom +samsung_tv_front_room +mat_hackintosh +media1 +media2 +guest_devices +cosy_heating +jessica_echo_dot +david_echo_dot +epson_xp_790 +sophy_iphone +sophy_laptop +virgin_box +nikita_ps4 +albert_pc +sophy_ps4 +mats_iphone_11_pro +katie_iphone_11_pro_2 +192.168.2.192 +192.168.2.194 +192.168.2.199 +esp32_1 +albert_iphone_xr +dad_pc +albert_new_pc +mat_hackintosh_wifi +inkbird_1 +ha +tp_link_smart_3way_1 +nikita_devices +jessica_devices +david_devices +tp_link_wifi +home_assistant +shed_socket_heater1 +energy_1 +unifi_ap2 +esp_devices +david_ipad +all_mats_devices +Internal_infrastructure +katies_devices +louis_devices +albert_devices +blink_devices +fire_tv_cube_front_room +192.168.100.85 +192.168.100.86 +nikita_pc +management + All our essential devices ( online always! ) + + + 1 + louis_devices + host + + 0 + + louis_iphone_7 +louis_pc +192.168.2.93 +192.168.2.94 + Louis stuff + + + 1 + nikita_devices + host + + 0 + + nikita_iphone_7 +nikitas_laptop +mat_imac_5k_sophys_room + Nikitas stuff + + + 1 + jessica_devices + host + + 0 + + jessica_ipad_mini +jessica_iphone_7 +jessica_pc +jessica_echo_dot +jessica_fire_tv +jess_laptop +savannah_phone + Jessicas stuff + + + 1 + david_devices + host + + 0 + + david_ipad +david_pc +david_iphones + Davids stuff + + + 1 + guest_devices + host + + 0 + + + Guest's Devices to allow + + + 1 + cosy_heating + host + + 0 + + 192.168.100.30 + Cosy heating system + + + 1 + david_iphones + host + + 0 + + 192.168.2.51 +192.168.2.53 + Davids iPhone 7 + 11 + + + 1 + jessica_echo_dot + host + + 0 + + 192.168.2.42 + Jessicas Echo dot + + + 1 + david_echo_dot + host + + 0 + + 192.168.2.52 + Davids Echo dot + + + 1 + opnsense + host + + 0 + + 192.168.0.1 + Opensense Server + + + 1 + epson_xp_790 + host + + 0 + + 192.168.2.5 + Epson XP790 Printer + + + 1 + nikita_ps4 + host + + 0 + + 192.168.2.65 + Nikitas PS4 + + + 1 + sophy_iphone + host + + 0 + + 192.168.2.70 + Sophys iPhone + + + 1 + sophy_laptop + host + + 0 + + 192.168.2.71 + Sophys Laptop + + + 1 + virgin_box + host + + 0 + + 192.168.100.51 + Virgin box + + + 1 + nikita_ps4_wired + host + + 0 + + 192.168.100.70 + Nikitas PS4 Wired + + + 1 + albert_pc + host + + 0 + + 192.168.100.80 + Alberts PC + + + 1 + sophy_ps4 + host + + 0 + + 192.168.2.72 + Sophys PS$ + + + 1 + mats_iphone_11_pro + host + + 0 + + 192.168.2.11 + Mats iPhone 11 Pro Max + + + 1 + katie_iphone_11_pro_2 + host + + 0 + + 192.168.2.22 + Katies iPhone 11 Max Pro 2 + + + 1 + esp32_1 + host + + 0 + + 192.168.2.100 + ESP32_1 + + + 1 + albert_iphone_xr + host + + 0 + + 192.168.2.87 + Alberts iPhone XR + + + 1 + jessica_fire_tv + host + + 0 + + 192.168.2.43 + Jessicas fire TV stick + + + 1 + dad_pc + host + + 0 + + 192.168.100.81 + Dads PC + + + 1 + albert_new_pc + host + + 0 + + 192.168.100.82 + Alberts new pc + + + 1 + mat_hackintosh_wifi + host + + 0 + + 192.168.2.12 + Mats Hackintosh Wifi + + + 1 + inkbird_1 + host + + 0 + + 192.168.2.110 + Inkbird Controller 1 + + + 1 + ha + host + + 0 + + 192.168.2.13 + Home Assistant Parallels + + + 1 + tp_link_smart_3way_1 + host + + 0 + + 192.168.2.111 + TP Link Smart 3way - 1 + + + 1 + tp_link_wifi + host + + 0 + + 192.168.2.73 + USB TPLink Wifi + + + 1 + home_assistant + host + + 0 + + 192.168.100.13 + Home Assistant - Parallels + + + 1 + shed_socket_heater1 + host + + 0 + + 192.168.2.121 + Sheds Socket for Heater 1 Staging area + + + 1 + energy_1 + host + + 0 + + 192.168.2.122 + Energy socket 1 + + + 1 + unifi_ap2 + host + + 0 + + 192.168.2.2 + + + + 1 + esp_devices + network + + 0 + + 192.168.32.0/24 + ESP Devices + + + 1 + trading_view + host + + 0 + + 52.89.214.238 +34.212.75.30 +54.218.53.128 +52.32.178.7 + Tradingview allow ips + + + 1 + all_mats_devices + network + + 0 + + 192.168.1.0/24 +192.168.10.0/24 + All Mats devices + + + 1 + Internal_infrastructure + network + + 0 + + 192.168.50.0/24 + + + + 1 + WIREGUARD_CLIENTS + network + + 0 + + 10.10.10.0/24 + Wireguard Clients + + + 1 + katies_devices + network + + 0 + + 192.168.3.0/24 + Katies Devices + + + 1 + albert_devices + network + + 0 + + 192.168.33.0/24 +albert_latest_pc +192.168.100.84 + Alberts Devices + + + 1 + jess_laptop + host + + 0 + + 192.168.100.67 + + + + 1 + blink_devices + network + + 0 + + 192.168.69.0/24 + + + + 1 + savannah_phone + host + + 0 + + 192.168.2.44 + + + + 1 + albert_latest_pc + host + + 0 + + 192.168.100.83 + Alberts Latest PC + + + 1 + fire_tv_cube_front_room + host + + 0 + + 192.168.2.33 + Fire TV Cube - Front Room + + + 1 + nikita_pc + host + + 0 + + 192.168.2.66 + Nikitas PC + + + 1 + management + network + + 0 + + 192.168.0.1/24 +192.168.250.1/24 + Management devices + + + 1 + netgear_sw_8p_bedroom + host + + 0 + + 192.168.0.3 + Netgear 8 Port Switch - Bedroom + + + 1 + ng_sw_24p_office + host + + 0 + + 192.168.0.4 + Netgear 24 Port Switch - Office + + + 1 + MAIL_PORTS + port + + 0 + + 25 +465 +143 +587 +993 +4190 + Mail ports for forwarding to Mail Server + + + + + + + + + + + + + + + 1 + + + + + + + + + + lan,wan + wan + v9 + 127.0.0.1:2056 + + + 1 + + 1800 + 15 + + + + 0 + + 3000 + + + + + + + + 0 + opnsense + + + + 1 + 1 + + + + + + 0 + on + strip + 1 + 1 + 0 + + admin@localhost.local + + + + 0 + /var/squid/cache + 256 + + + always + 100 + 16 + 256 + 0 + 0 + + + + 0 + 2048 + 1024 + 1024 + 256 + + + 0 + + 0 + username + password + + + + + + + lan + 3128 + 3129 + 0 + 0 + + + 4 + 5 + 0 + 3401 + public + + 2121 + 0 + 1 + 0 + + + + + + + + + + + 80:http,21:ftp,443:https,70:gopher,210:wais,1025-65535:unregistered ports,280:http-mgmt,488:gss-http,591:filemaker,777:multiling http + 443:https + + + + + + + 0 + icap://[::1]:1344/avscan + icap://[::1]:1344/avscan + 1 + 0 + 0 + X-Username + 1 + 1024 + 60 + + + + + + OPNsense proxy authentication + 2 + 5 + + + + +