Firewall
Firewall Rules
| Allow all from LAN to WAN | ||||
| Allow some (egress filtering) from LAN to WAN | ||||
| Block all from WAN to LAN | ||||
| Allow HTTP from LAN to DMZ | ||||
| Allow HTTP from WAN to DMZ | ||||
| Block all from DMZ to LAN |
a
b
c
d
Quellen/source:
- opnSense | Docs » Firewall » Rules
-
-
-
-
opnSense | HAProxy
Add a comment
OPNsense GUI - System -> Settings -> Administration
Add a comment
opnSense | DLNA propacation
Quellen/Source:
- dlna wiki Page
- wombat Plex | needed Ports
- opnSense forum | DLNA propacation
- wombat Philips 32PFK5300
-
-
-
-
-
-
- Add a comment
Quellen/Source:
- dlna wiki Page
- wombat Plex | needed Ports
- opnSense forum | DLNA propacation
- wombat Philips 32PFK5300
-
-
-
-
-
-
- Add a comment
opnSense | UPC/USV | NUT
Source/Quellen:
- opnSense | Forum | Nut for APC Pro 900
-
-
-
-
-
-
-
-
-
-
opnSense | with AP (UniFi AP AC-PRO) with Radius (opnSense) identification
Quellen/Source:
- opnSense Documentation | FreeRadius Installation
- opnSense Forum | request because of the login
-
-
-
-
-
-
-
opnSense | VPN einrichten mit openVPN
Quellen/Source:
-
-
-
- YouTube | Thomas-Krenn | OPNsense für Anwender – Wie Sie mit VPN sichere Netzwerkzugänge einrichten
- opnSense wiki | Setup SSL VPN Road Warrior
-
-
-
-
- forum.opnsense | can't add Client in FreeRadius, no information in Log
- forum.opnsense | best Practice? - openVPN connection file for different user
- forum.opnsense | openVPN connection ok, but no access to LAN
-
opnSense | with built-inWLAN (wle200nx) with Radius identification
Quellen/Source:
- opnSense wiki | FreeRADIUS - Installation
- opnSense wiki | Access / Servers / Radius
-
-
-
-
-
-
-
-
-
-
- Add a comment
Quellen/Source:
- opnSense wiki | FreeRADIUS - Installation
- opnSense wiki | Access / Servers / Radius
-
-
-
-
-
-
-
-
-
-
- Add a comment
Free IPA |
-
-
- - - -
Quellen/Source:
- needed Ports for FreeIPA
-
- Add a comment
| steps |
On IPA serverIPA uses the following ports to communicate with its services: |
||
| TCP ports: 80, 88, 443, 389, 636, 88, 464, 53, 135, 138, 139, 445, 1024-1300 | |||
| UDP ports: 88, 464, 53, 123, 138, 139, 389, 445 | |||
-
- - - -
Quellen/Source:
- needed Ports for FreeIPA
-
- Add a comment
Add WLAN Interface (IP Adressen entsprechend anpassen)
OpnSense Version
OPNsense 17.7.12-amd64
FreeBSD 11.0-RELEASE-p17
LibreSSL 2.6.4
| Interface - Wireless - Device | +add [Description] |
||
| Interface - Assignments | select network Port and Press + select the Interface Name crated |
||
| General configuration Enable Interface Descritpion [WLAN] IPv4 Configuration Type [static IPv4] |
|||
| Static IPv4 configuration IPv4 address [10.20.20.1]/24 |
|||
|
Common wireless configuration - |
|||
| Network-specific wireless configuration Mode [Access Point] SSID [name des Signal] WPA [x] Enable WPA WPA Pre-Shared Key [passowrt] WPA Mode [WPA2] |
|||
| save & Apply Changes | |||
| System - Gateways - All | +add gateway Interface [WLAN] Name [GW_WLAN] |
||
| Services - DHCP - Server (Select the WLAN Tab)!!! |
Enable [x] Range add from to DNS Server [add IP] |
---
Subcategories
OPNSense Article Count: 12
- Anker 575 USB-C Docking Station (13-in-1), 85W für Laptops
- Perfect Server Hardware for Virtualization | Proxmox | pve-05
- Pioneer Blu-Ray/BD/DVD/CD Reader/writer USB 3.0 BDR-XD07TB | WORKS OK with Debian 11
- NOT WORKING WITH DEBIAN 11 | Dockingstation | IcyBox 14-in-1 USB Type-C | IB-DK2262AC
- How to remove systemd services
- Laptop | Lenovo | Thinkpad E15 Gen3 AMD
- Laptop | Lenovo | LENOVO-IDEA IdeaPad 3 15IGL05 Notebook (15.6 ", 128 GB SSD, Business Black)
- D. Klimo | Kent monoblocks
- TTN Mapper
- LILYGO TTGO T-Beam V1.1 ESP32 LoRa 868Mhz GPS 18650 Board
- LILYGO® TTGO T-Beam 868MHz -> The Things Network (TTN/TTS) -> Karte | Infos und Video bei Alex (www.aeq-web.com)
- Kabelfarben 3.3V, 5V, 12V, 230V | Durchmesser
- 01 Digi-Bee Stand01 Wetter
- Solar Panel | 6V 3W Solar Panel JY D145x145
- TTGO LoRa32 V2.1_1.6 version 433/868/915Mhz ESP32 LoRa OLED 0.96 Inch SD Card Bluetooth WIFI wireless Module ESP-32 SMA
- -pve-04 | Disk SSD and HDD
- DISK SSD | 1 TB | Samsung SSD 870 EVO 1TB - 1TB
- NanoVNA V2
- CubeSat | antennas |
- KoZo_GS3_433MHz
- tinyGS - shortcut what it means
- TinyGS Telegram community | published Links
- Wolfgang W. Osterhage (Springer Verlag Sachbuch 2021): Die Geschichte der Raumfahrt | (gefundene Fehler)
- ucs Univention some commands
- SMA-Stecker / SMA-Buchse
RSS Feed
Warning: Invalid argument supplied for foreach() in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 39
Warning: Invalid argument supplied for foreach() in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 39
-
Cisco Secure Web Appliance Privilege Escalation Vulnerability
Cisco Secure Web Appliance Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to <em>root.</em><br><br> This vulnerability is due to insufficient validation of user-supplied input for the CLI.[…]
Source: Cisco Security Advisory
Created on: 23.11.2024 | 02:13
Cisco Security Advisory | 23.11.2024 | 02:13 -
Minispiel auf Steam: Hacky macht Spieler zum filmreifen Meister-Hacker
Minispiel auf Steam: Hacky macht Spieler zum filmreifen Meister-Hacker
Wer neugierige Sitznachbarn beeindrucken oder sich einfach mal wie ein richtiger Film-Hacker fühlen möchte, wird auf Steam fündig.
Source: heise Security
Created on: 22.11.2024 | 17:47
heise Security | 22.11.2024 | 17:47 -
"Schlimmsten-Liste": CISA veröffentlicht die Top 25 Softwarelücken des Jahres
"Schlimmsten-Liste": CISA veröffentlicht die Top 25 Softwarelücken des Jahres
Die US-Behörde CISA und Mitre haben die Top 25 der gefährlichsten Software-Schwachstellen des Jahres 2024 veröffentlicht.
Source: heise Security
Created on: 22.11.2024 | 17:26
heise Security | 22.11.2024 | 17:26 -
Angriffe auf Citrix-Sicherheitslücke beobachtet
Angriffe auf Citrix-Sicherheitslücke beobachtet
In der vergangenen Woche hat Citrix Sicherheitslücken im Session Recording geschlossen. Nun haben IT-Forscher Angriffe darauf beobachtet.
Source: Security-Alert Meldungen
Created on: 22.11.2024 | 13:50
Security-Alert Meldungen | 22.11.2024 | 13:50 -
MIT-Forscher lehren KI-Agenten 50mal effizienter
MIT-Forscher lehren KI-Agenten 50mal effizienter
KI-Agenten werden derzeit für eine Vielzahl von Aufgaben entwickelt, bei denen sie selbstständig Entscheidungen treffen sollen.
Source: Linux-Magazin
Created on: 22.11.2024 | 11:43
Linux-Magazin | 22.11.2024 | 11:43 -
Proxmox VE 8.3 rüstet bei SDN und Webhooks nach
Proxmox VE 8.3 rüstet bei SDN und Webhooks nach
Die Distribution Proxmox VE verwandelt ein System in eine Basis für Container und virtuelle Maschinen.
Source: Linux-Magazin
Created on: 22.11.2024 | 11:05
Linux-Magazin | 22.11.2024 | 11:05 -
PHP-Updates: 8.1.31, 8.2.26, 8.3.14 und 8.4.1 stopfen Sicherheitslecks
PHP-Updates: 8.1.31, 8.2.26, 8.3.14 und 8.4.1 stopfen Sicherheitslecks
Die PHP-Entwickler haben neue Pakete veröffentlicht. PHP 8.1.31, 8.2.26, 8.3.14 und 8.4.1 schließen Sicherheitslücken.
Source: Security-Alert Meldungen
Created on: 22.11.2024 | 08:51
Security-Alert Meldungen | 22.11.2024 | 08:51 -
Proxmox VE 8.3 released!
Proxmox VE 8.3 released!
Source: Announcements
Created on: 21.11.2024 | 12:35
Announcements | 21.11.2024 | 12:35 -
Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability
Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability
A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. <br><br> This vulnerability is[…]
Source: Cisco Security Advisory
Created on: 14.11.2024 | 00:00
Cisco Security Advisory | 14.11.2024 | 00:00 -
Proxmox at Open Source Summit 2024 in Vienna
Proxmox at Open Source Summit 2024 in Vienna
Source: Announcements
Created on: 4.09.2024 | 15:01
Announcements | 4.09.2024 | 15:01
neusten Links
Warning: count(): Parameter must be an array or an object that implements Countable in /var/www/clients/client2/web2/web/j/modules/mod_quicklistweblinks/helper.php on line 78
many More Links »
part of ...
