gilles/opnsense_backup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: gilles:1d9938d4a208805b3e0d8ea7e84452f8a4f503a2
Branches Tags
gilles:main
...
compare: gilles:c37c5bf5314374bdee3e1f64cdddf472905c1045
Branches Tags
gilles:main

35 Commits
1d9938d4a2 ... c37c5bf531

Author SHA1 Message Date
System Administrator
c37c5bf531 /api/firewall/alias/set_item/dbd4134e-323f-465c-9fd4-222ee6c24e0e changement(s) effectué(s) @ 2025-12-25T17:02:47.350000 (root@10.0.1.109) 2025-12-25 17:02:47 +01:00
System Administrator
ef4f9b882a /api/firewall/alias/add_item/ changement(s) effectué(s) @ 2025-12-25T17:02:25.330000 (root@10.0.1.109) 2025-12-25 17:02:25 +01:00
System Administrator
4fc06b1f5f /firewall_nat.php made changes @ - (root@10.0.1.109) 2025-12-25 16:15:35 +01:00
System Administrator
411e456567 /firewall_nat_edit.php made changes @ - (root@10.0.1.109) 2025-12-25 16:14:43 +01:00
System Administrator
14659da98c /firewall_rules_edit.php made changes @ - (root@10.0.1.109) 2025-12-25 16:11:08 +01:00
System Administrator
740174922c /api/unbound/settings/addDot/ changement(s) effectué(s) @ 2025-12-25T15:32:13.550000 (root@10.0.1.109) 2025-12-25 15:32:14 +01:00
System Administrator
32733f4d26 /api/unbound/settings/addDot/ changement(s) effectué(s) @ 2025-12-25T15:31:46.080000 (root@10.0.1.109) 2025-12-25 15:31:46 +01:00
System Administrator
09e0395e63 /api/unbound/settings/addDot/ changement(s) effectué(s) @ 2025-12-25T15:31:12.910000 (root@10.0.1.109) 2025-12-25 15:31:13 +01:00
System Administrator
85ea3c48a9 /api/unbound/settings/addDot/ changement(s) effectué(s) @ 2025-12-25T15:30:44.060000 (root@10.0.1.109) 2025-12-25 15:30:44 +01:00
System Administrator
d93ad1a3a8 /api/unbound/settings/set changement(s) effectué(s) @ 2025-12-25T15:25:37.060000 (root@10.0.1.109) 2025-12-25 15:25:37 +01:00
System Administrator
114bad115a /api/unbound/settings/set changement(s) effectué(s) @ 2025-12-25T15:23:37.730000 (root@10.0.1.109) 2025-12-25 15:23:38 +01:00
System Administrator
08d04a6bee /api/dnsmasq/settings/set changement(s) effectué(s) @ 2025-12-25T15:23:17.900000 (root@10.0.1.109) 2025-12-25 15:23:18 +01:00
System Administrator
7f19da54c3 /api/dnsmasq/settings/set changement(s) effectué(s) @ 2025-12-25T15:23:07.920000 (root@10.0.1.109) 2025-12-25 15:23:08 +01:00
System Administrator
b2d2ded201 /services_dhcp.php made changes @ - (root@10.0.1.109) 2025-12-25 15:14:20 +01:00
System Administrator
2afc9935f6 /api/unbound/settings/set changement(s) effectué(s) @ 2025-12-25T14:53:40.660000 (root@10.0.1.109) 2025-12-25 14:53:41 +01:00
System Administrator
1ed68d7b18 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:52:11.830000 (root@10.0.1.109) 2025-12-25 14:52:12 +01:00
System Administrator
198ec61d05 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:51:50.210000 (root@10.0.1.109) 2025-12-25 14:51:50 +01:00
System Administrator
93bdf61f5e /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:51:30.290000 (root@10.0.1.109) 2025-12-25 14:51:30 +01:00
System Administrator
7e8eae87fa /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:51:08.240000 (root@10.0.1.109) 2025-12-25 14:51:08 +01:00
System Administrator
a71a43c7d0 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:50:51.150000 (root@10.0.1.109) 2025-12-25 14:50:51 +01:00
System Administrator
6fc300238e /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:50:30.260000 (root@10.0.1.109) 2025-12-25 14:50:30 +01:00
System Administrator
eaada423ab /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:50:11.490000 (root@10.0.1.109) 2025-12-25 14:50:12 +01:00
System Administrator
2501446a6a /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:49:40.990000 (root@10.0.1.109) 2025-12-25 14:49:41 +01:00
System Administrator
04ffff34e8 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:49:21.170000 (root@10.0.1.109) 2025-12-25 14:49:21 +01:00
System Administrator
a92b9764d0 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:48:53.080000 (root@10.0.1.109) 2025-12-25 14:48:53 +01:00
System Administrator
ce0b6bbd12 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:47:48.880000 (root@10.0.1.109) 2025-12-25 14:47:49 +01:00
System Administrator
8a9e3275e2 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:47:26.580000 (root@10.0.1.109) 2025-12-25 14:47:27 +01:00
System Administrator
d89c970637 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:47:07.440000 (root@10.0.1.109) 2025-12-25 14:47:08 +01:00
System Administrator
ff3517e08b /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:46:42.610000 (root@10.0.1.109) 2025-12-25 14:46:43 +01:00
System Administrator
d53f6419f9 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:46:25.100000 (root@10.0.1.109) 2025-12-25 14:46:25 +01:00
System Administrator
7f65b7714a /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:45:58.280000 (root@10.0.1.109) 2025-12-25 14:45:58 +01:00
System Administrator
6dc8142d15 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:45:35.710000 (root@10.0.1.109) 2025-12-25 14:45:36 +01:00
System Administrator
7e4592a0d4 /api/unbound/settings/add_host_override/ changement(s) effectué(s) @ 2025-12-25T14:42:42.330000 (root@10.0.1.109) 2025-12-25 14:42:42 +01:00
(root)
0a113a73e0 Updated plugin interface configuration @ 2025-12-25T10:17:27.560000 ((root)) 2025-12-25 10:17:28 +01:00
(system)
8a22814418 /usr/local/opnsense/mvc/script/run_migrations.php made changes @ 2025-12-25T10:17:27.400000 ((system)) 2025-12-25 10:17:28 +01:00
1 changed files with 381 additions and 29 deletions
Expand all files Collapse all files

410
config.xml
View File

@@ -468,14 +468,6 @@
<dnsserver/>
<ntpserver/>
</staticmap>
<staticmap>
<mac>10:08:c1:39:e7:e7</mac>
<ipaddr>10.0.1.241</ipaddr>
<hostname>lg-tv</hostname>
<winsserver/>
<dnsserver/>
<ntpserver/>
</staticmap>
<staticmap>
<mac>80:97:1b:04:12:1e</mac>
<ipaddr>10.0.1.243</ipaddr>
@@ -492,6 +484,7 @@
<dnsserver/>
<ntpserver/>
</staticmap>
<pool/>
</lan>
</dhcpd>
<snmpd>
@@ -688,6 +681,36 @@
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<rule>
<protocol>tcp/udp</protocol>
<interface>lan</interface>
<category/>
<ipprotocol>inet</ipprotocol>
<descr>Forcer DNS LAN vers OPNsense</descr>
<tag/>
<tagged/>
<poolopts/>
<associated-rule-id>nat_694d54e2ef9234.46943943</associated-rule-id>
<target>10.0.0.1</target>
<local-port>53</local-port>
<source>
<network>lan</network>
</source>
<destination>
<any>1</any>
<port>53</port>
</destination>
<updated>
<username>root@10.0.1.109</username>
<time>1766675682,98</time>
<description>/firewall_nat_edit.php made changes</description>
</updated>
<created>
<username>root@10.0.1.109</username>
<time>1766675682,98</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
</nat>
<filter>
<rule uuid="861ba77f-f94f-46ba-bd01-8e6fff2a4d30">
@@ -938,6 +961,34 @@
</created>
<log>1</log>
</rule>
<rule uuid="a6b669b1-d65d-4117-9b29-692a5c25d8e5">
<type>pass</type>
<interface>lan</interface>
<ipprotocol>inet</ipprotocol>
<statetype>keep state</statetype>
<descr>DNS LAN vers OPNsense</descr>
<direction>in</direction>
<log>1</log>
<quick>1</quick>
<protocol>tcp/udp</protocol>
<source>
<network>lan</network>
</source>
<destination>
<network>(self)</network>
<port>53</port>
</destination>
<updated>
<username>root@10.0.1.109</username>
<time>1766675468,10</time>
<description>/firewall_rules_edit.php made changes</description>
</updated>
<created>
<username>root@10.0.1.109</username>
<time>1766675468,10</time>
<description>/firewall_rules_edit.php made changes</description>
</created>
</rule>
<rule uuid="f8c860db-9912-4f0c-afeb-b112c0f6a3ff">
<type>pass</type>
<interface>opt1</interface>
@@ -962,6 +1013,28 @@
<description>/firewall_rules_edit.php made changes</description>
</created>
</rule>
<rule>
<type>pass</type>
<associated-rule-id>nat_694d54e2ef9234.46943943</associated-rule-id>
<source>
<network>lan</network>
</source>
<interface>lan</interface>
<statetype>keep state</statetype>
<protocol>tcp/udp</protocol>
<ipprotocol>inet</ipprotocol>
<destination>
<address>10.0.0.1</address>
<port>53</port>
</destination>
<descr>Forcer DNS LAN vers OPNsense</descr>
<category/>
<created>
<username>root@10.0.1.109</username>
<time>1766675682,98</time>
<description>/firewall_nat_edit.php made changes</description>
</created>
</rule>
<scrub>
<rule>
<interface>wireguard</interface>
@@ -1041,8 +1114,8 @@
</widgets>
<revision>
<username>root@10.0.1.109</username>
<description>/services_dhcp.php made changes</description>
<time>1766317666,16</time>
<description>/api/firewall/alias/set_item/dbd4134e-323f-465c-9fd4-222ee6c24e0e changement(s) effectu&#xE9;(s)</description>
<time>1766678567.35</time>
</revision>
<OPNsense>
<wireguard>
@@ -1203,7 +1276,7 @@
<Lvtemplate version="0.0.1">
<templates/>
</Lvtemplate>
<Alias version="1.0.1">
<Alias version="1.0.1" persisted_at="1766678567.35" description="Firewall aliases">
<geoip>
<url>https://1106509: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@download.maxmind.com/geoip/databases/GeoLite2-Country-CSV/download?suffix=zip</url>
</geoip>
@@ -1212,6 +1285,7 @@
<enabled>1</enabled>
<name>Geoblocking</name>
<type>geoip</type>
<path_expression/>
<proto/>
<interface/>
<counters>1</counters>
@@ -1219,9 +1293,32 @@
<content>CN
BY
RU</content>
<password/>
<username/>
<authtype/>
<expire/>
<categories/>
<description/>
</alias>
<alias uuid="dbd4134e-323f-465c-9fd4-222ee6c24e0e">
<enabled>1</enabled>
<name>PAYS_BLOQUES</name>
<type>geoip</type>
<path_expression/>
<proto/>
<interface/>
<counters>1</counters>
<updatefreq/>
<content>CN
KP
RU</content>
<password/>
<username/>
<authtype/>
<expire/>
<categories/>
<description>PAYS_BLOQUES</description>
</alias>
</aliases>
</Alias>
<Category version="1.0.0">
@@ -1946,13 +2043,13 @@ RU</content>
<queues/>
<rules/>
</TrafficShaper>
<unboundplus version="1.0.12" persisted_at="1763925896.74" description="Unbound configuration">
<unboundplus version="1.0.13" persisted_at="1766673133.55" description="Unbound configuration">
<general>
<enabled>0</enabled>
<enabled>1</enabled>
<port>53</port>
<stats/>
<active_interface/>
<dnssec>0</dnssec>
<dnssec>1</dnssec>
<dns64>0</dns64>
<dns64prefix/>
<noarecords>0</noarecords>
@@ -1963,6 +2060,7 @@ RU</content>
<noregrecords>0</noregrecords>
<txtsupport>0</txtsupport>
<cacheflush>0</cacheflush>
<safesearch>0</safesearch>
<local_zone_type>transparent</local_zone_type>
<outgoing_interface/>
<enable_wpad>0</enable_wpad>
@@ -2010,22 +2108,274 @@ RU</content>
<acls>
<default_action>allow</default_action>
</acls>
<dnsbl>
<enabled>0</enabled>
<safesearch/>
<type/>
<lists/>
<whitelists/>
<blocklists/>
<wildcards/>
<address/>
<nxdomain/>
</dnsbl>
<dnsbl/>
<forwarding>
<enabled/>
</forwarding>
<dots/>
<hosts/>
<dots>
<dot uuid="744fed9a-5dc5-4f13-941f-78f34861d987">
<enabled>1</enabled>
<type>dot</type>
<domain/>
<server>9.9.9.9</server>
<port>853</port>
<verify/>
<forward_tcp_upstream>0</forward_tcp_upstream>
<forward_first>0</forward_first>
<description>Quad9 DNS over TLS</description>
</dot>
<dot uuid="0834a622-3656-465f-a34f-26ef29691a90">
<enabled>1</enabled>
<type>dot</type>
<domain/>
<server>149.112.112.112</server>
<port>853</port>
<verify/>
<forward_tcp_upstream>0</forward_tcp_upstream>
<forward_first>0</forward_first>
<description>Quad9 secondaire</description>
</dot>
<dot uuid="6771211d-d697-4574-abfc-e10880486f23">
<enabled>1</enabled>
<type>dot</type>
<domain/>
<server>1.1.1.1</server>
<port>853</port>
<verify/>
<forward_tcp_upstream>0</forward_tcp_upstream>
<forward_first>0</forward_first>
<description>Cloudflare DoT</description>
</dot>
<dot uuid="23011c87-1577-4eaa-b75b-4df9af4ea5e3">
<enabled>1</enabled>
<type>dot</type>
<domain/>
<server>1.0.0.1</server>
<port>853</port>
<verify/>
<forward_tcp_upstream>0</forward_tcp_upstream>
<forward_first>0</forward_first>
<description>Cloudflare DoT secondaire</description>
</dot>
</dots>
<hosts>
<host uuid="f40152ab-d686-448c-bab9-07ecd44a3666">
<enabled>1</enabled>
<hostname>homeassistant</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.2</server>
<txtdata/>
<description/>
</host>
<host uuid="c227f354-65c1-493d-9721-e48eeadfdacf">
<enabled>1</enabled>
<hostname>lxc-mariadb</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.14</server>
<txtdata/>
<description/>
</host>
<host uuid="fa34e4b0-b433-4c6f-ae14-cab48ddb0978">
<enabled>1</enabled>
<hostname>vm-ansible</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.1.11</server>
<txtdata/>
<description/>
</host>
<host uuid="24c783c9-dc22-4ff8-a14f-dc2ab42957c4">
<enabled>1</enabled>
<hostname>vm-docker8</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.8</server>
<txtdata/>
<description/>
</host>
<host uuid="38355383-b078-4849-9841-232ebae0d463">
<enabled>1</enabled>
<hostname>vm-docker0</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.212</server>
<txtdata/>
<description/>
</host>
<host uuid="77308666-4ae5-4fb7-8d15-2412ad02c3e9">
<enabled>1</enabled>
<hostname>vm-docker10</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.20</server>
<txtdata/>
<description/>
</host>
<host uuid="d4564bd4-54f8-40b5-a229-42c68a442394">
<enabled>1</enabled>
<hostname>vm-docker13</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.1.98</server>
<txtdata/>
<description/>
</host>
<host uuid="ed4fca39-ca0f-4c6c-ba46-f64158e3c43d">
<enabled>1</enabled>
<hostname>vm-docker2</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.26</server>
<txtdata/>
<description/>
</host>
<host uuid="0ee62546-5e14-4744-ae79-8bdf05c83810">
<enabled>1</enabled>
<hostname>vm-docker3</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.1.98</server>
<txtdata/>
<description/>
</host>
<host uuid="f27f1f86-bf9d-487f-8481-80ab13e07d04">
<enabled>1</enabled>
<hostname>vm-frigate</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.206</server>
<txtdata/>
<description/>
</host>
<host uuid="2be929e5-0506-4f0a-ad4e-d55f30865322">
<enabled>1</enabled>
<hostname>vm-gitlab</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.200</server>
<txtdata/>
<description/>
</host>
<host uuid="de31e06a-ca0a-4daa-b54a-d4ba43fec06d">
<enabled>1</enabled>
<hostname>vm-jellyfin</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.33</server>
<txtdata/>
<description/>
</host>
<host uuid="3c952cee-27d9-4224-be3e-852ff758baa9">
<enabled>1</enabled>
<hostname>vm-mediaserver</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.29</server>
<txtdata/>
<description/>
</host>
<host uuid="a186e0e0-f1e8-4c1b-9237-116015d9953a">
<enabled>1</enabled>
<hostname>vm-mesdata</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.34</server>
<txtdata/>
<description/>
</host>
<host uuid="5d9c4cd8-a912-44e6-b1b4-5b647265cc35">
<enabled>1</enabled>
<hostname>vm-mqtt</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.3</server>
<txtdata/>
<description/>
</host>
<host uuid="78381e6b-f914-4085-93a1-3f56940bdf1f">
<enabled>1</enabled>
<hostname>vm-nodered</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.9</server>
<txtdata/>
<description/>
</host>
<host uuid="16412101-2da7-4631-9173-0865130ce0d7">
<enabled>1</enabled>
<hostname>vm-vaultwarden</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.16</server>
<txtdata/>
<description/>
</host>
<host uuid="44886151-18c6-454e-b7ce-2349a473e27e">
<enabled>1</enabled>
<hostname>vm-weewx</hostname>
<domain>home</domain>
<rr>A</rr>
<mxprio/>
<mx/>
<ttl/>
<server>10.0.0.13</server>
<txtdata/>
<description/>
</host>
</hosts>
<aliases/>
</unboundplus>
<DynDNS version="1.5.1">
@@ -2221,8 +2571,8 @@ RU</content>
<reverseproxy/>
</caddy>
</Pischem>
<dnsmasq version="1.0.8" persisted_at="1766317386.47" description="Dnsmasq DNS and DHCP">
<enable>1</enable>
<dnsmasq version="1.0.8" persisted_at="1766672597.90" description="Dnsmasq DNS and DHCP">
<enable>0</enable>
<regdhcp>1</regdhcp>
<regdhcpstatic>1</regdhcpstatic>
<dhcpfirst>1</dhcpfirst>
@@ -2254,6 +2604,8 @@ RU</content>
<reply_delay/>
<enable_ra>0</enable_ra>
<nosync>0</nosync>
<log_dhcp>0</log_dhcp>
<log_quiet>0</log_quiet>
</dhcp>
<no_ident>1</no_ident>
<hosts uuid="18e41138-de88-4096-ad30-e7030f85dd09">