OPNsense

https://docs.opnsense.org/
Admin
OPNsense is an open-source, easy-to-use and easy-to-build FreeBSD based firewall and routing...
Tokens:304,789
Snippets:4,510
Trust Score:10
Update:1 month ago
Show doc for...
Tokens:
Raw
### Configure rc(8) Daemon Setup

Source: https://docs.opnsense.org/development/backend/autorun.html

Example configuration for a daemon in /etc/rc.conf.d/ defining a setup script and enabling the service.

```text
squid_setup="/usr/local/opnsense/scripts/proxy/setup.sh"
squid_enable="YES"
```

--------------------------------

### Create Early Boot Syshook Script

Source: https://docs.opnsense.org/development/backend/autorun.html

Example of a shell script placed in the early directory to start VMware kernel modules.

```bash
#!/bin/sh

export vmware_guest_vmblock_enable="YES"
export vmware_guest_vmhgfs_enable="YES"
export vmware_guest_vmmemctl_enable="YES"
export vmware_guest_vmxnet_enable="YES"

/usr/local/etc/rc.d/vmware-kmod start
```

--------------------------------

### Install a software package

Source: https://docs.opnsense.org/manual/software_included.html

Install specific binary packages from the repository using the pkg utility.

```shell
pkg install nano
```

--------------------------------

### Registering a Service

Source: https://docs.opnsense.org/development/backend/legacy.html

Example of a service registration function that defines start, stop, and restart actions via configd.

```php
function myplugin_services()
{
    $service = array();
    $service['name'] = 'myservice';
    $service['description'] = gettext('My service');
    $service['configd']['restart'] = array('myservice restart');
    $service['configd']['start'] = array('myservice start');
    $service['configd']['stop'] = array('myservice stop');
    $services[] = $pconfig;
    return $services;
}
```

--------------------------------

### Build and install a port

Source: https://docs.opnsense.org/manual/software_included.html

Use the OPNsense build system to compile and install software from the ports tree.

```shell
opnsense-code ports
cd /usr/ports/your/port
make install
```

--------------------------------

### Install Virtualization Plugins

Source: https://docs.opnsense.org/releases/CE_15.7.html

Commands to install VMware and Xen guest support plugins via the package manager.

```bash
# pkg install os-vmware
# pkg install os-xen
```

--------------------------------

### Install network-manager-strongswan

Source: https://docs.opnsense.org/manual/how-tos/ipsec-rw-linux.html

Install the necessary plugin to support IPsec/IKEv2 connections via the network manager.

```bash
apt install network-manager-strongswan
```

--------------------------------

### Install NextCloud backup plugin

Source: https://docs.opnsense.org/releases/CE_21.7.html

Manual installation command for the NextCloud backup plugin via the console.

```shell
pkg install os-nextcloud-backup-devel
```

--------------------------------

### Install netmap-bridge

Source: https://docs.opnsense.org/troubleshooting/network.html

Installs the netmap-bridge utility to help isolate Netmap connectivity issues.

```shell
pkg install netmap-bridge
```

--------------------------------

### POST /api/redis/service/start

Source: https://docs.opnsense.org/development/api/plugins/redis.html

Starts the Redis service.

```APIDOC
## POST /api/redis/service/start

### Description
Starts the Redis service.

### Method
POST

### Endpoint
/api/redis/service/start
```

--------------------------------

### POST /api/zabbixagent/service/start

Source: https://docs.opnsense.org/development/api/plugins/zabbixagent.html

Starts the Zabbixagent service.

```APIDOC
## POST /api/zabbixagent/service/start

### Description
Starts the Zabbixagent service.

### Method
POST

### Endpoint
/api/zabbixagent/service/start
```

--------------------------------

### PSR-2 Compliance Example

Source: https://docs.opnsense.org/development/guidelines/psr2.html

A comprehensive example demonstrating namespace, use declarations, class structure, method visibility, and control structure formatting according to PSR-2.

```php
<?php
namespace Vendor\Package;

use FooInterface;
use BarClass as Bar;
use OtherVendor\OtherPackage\BazClass;

class Foo extends Bar implements FooInterface
{
    public function sampleFunction($a, $b = null)
    {
        if ($a === $b) {
            bar();
        } elseif ($a > $b) {
            $foo->bar($arg1);
        } else {
            BazClass::bar($arg2, $arg3);
        }
    }

    final public static function bar()
    {
        // method body
    }
}
```

--------------------------------

### Install Development Packages

Source: https://docs.opnsense.org/development/workflow.html

Installs essential tools like git, tmux, and various text editors for the development environment.

```shell
# pkg install vim-console emacs-nox joe nano gnu-watch git tmux screen
```

--------------------------------

### SHA256 Checksums for Installation Media

Source: https://docs.opnsense.org/releases/CE_26.1.html

Verification hashes for the OPNsense 26.1 installation images.

```text
# SHA256 (OPNsense-26.1-dvd-amd64.iso.bz2) = 856c00a4ddf62f40cdc0871cd9fb6bbd455fb4dcca9337713b95ff42a41c88b2
# SHA256 (OPNsense-26.1-nano-amd64.img.bz2) = 5731a3f21c5dbe221acf5b4777ed686f705f27e7560ffb05d29a68ea4e7c7e50
# SHA256 (OPNsense-26.1-serial-amd64.img.bz2) = aaca6d4c44371673c555be354317533cf91ced86fc86c026716325c29c451d79
# SHA256 (OPNsense-26.1-vga-amd64.img.bz2) = 3901b83750dd19ca26632b61bf5fe7ac86b8cfa0bfb3e633928c37416a14e5f9
```

--------------------------------

### SHA256 Checksums for Installation Images

Source: https://docs.opnsense.org/releases/CE_20.7.html

Verification checksums for the OPNsense 20.7 installation images.

```text
# SHA256 (OPNsense-20.7-OpenSSL-dvd-amd64.iso.bz2) = 580070a3a0533418d58eaeb78122f804f2df7081c929288e1dccee34c4bf763a
# SHA256 (OPNsense-20.7-OpenSSL-nano-amd64.img.bz2) = 6deb370c2a64fa6c60b7f59a4afb31b2dd28b812f5fcd59eaa6d458938d45630
# SHA256 (OPNsense-20.7-OpenSSL-serial-amd64.img.bz2) = 1276cddd5f7b89aa54fc4a1517cb0686efe94f672627243c5b34d93340441d60
# SHA256 (OPNsense-20.7-OpenSSL-vga-amd64.img.bz2) = 72cbffe3bba4884586c8ded8dbca4cf30fb34a094602e5f681efde2deea595c6
```

--------------------------------

### Install Zenarmor via CLI

Source: https://docs.opnsense.org/vendor/sunnyvalley/zenarmor_cmd_install.html

Commands to install the vendor repository and the Zenarmor package from the OPNsense shell.

```bash
pkg install os-sunnyvalley
```

```bash
pkg install os-sensei
```

--------------------------------

### POST /api/dyndns/service/start

Source: https://docs.opnsense.org/development/api/plugins/dyndns.html

Starts the DynDNS service.

```APIDOC
## POST /api/dyndns/service/start

### Description
Starts the DynDNS service.

### Method
POST

### Endpoint
/api/dyndns/service/start
```

--------------------------------

### POST /api/muninnode/service/start

Source: https://docs.opnsense.org/development/api/plugins/muninnode.html

Starts the Muninnode service.

```APIDOC
## POST /api/muninnode/service/start

### Description
Starts the Muninnode service.

### Method
POST

### Endpoint
/api/muninnode/service/start
```

--------------------------------

### POST /api/sslh/service/start

Source: https://docs.opnsense.org/development/api/plugins/sslh.html

Starts the Sslh service.

```APIDOC
## POST /api/sslh/service/start

### Description
Starts the Sslh service.

### Method
POST

### Endpoint
/api/sslh/service/start
```

--------------------------------

### POST /api/lldpd/service/start

Source: https://docs.opnsense.org/development/api/plugins/lldpd.html

Starts the LLDPD service.

```APIDOC
## POST /api/lldpd/service/start

### Description
Starts the LLDPD service.

### Method
POST

### Endpoint
/api/lldpd/service/start
```

--------------------------------

### Configure NS records for a zone

Source: https://docs.opnsense.org/vendor/deciso/opndns.html

Example configuration for nameserver records within an internal zone.

```text
internal 300 IN NS ns1.internal
internal 300 IN NS ns2.internal
```

--------------------------------

### MD5 Checksums

Source: https://docs.opnsense.org/releases/CE_15.1.html

MD5 checksums for OPNsense 15.1.8 installation media.

```text
# MD5 (OPNsense-15.1.8-cdrom-amd64.iso.bz2) = 79eff753cdb749dacb9e106a1781ce64
# MD5 (OPNsense-15.1.8-serial-amd64.img.bz2) = 8e643edf6d6cee72535bd8913cf4176e
# MD5 (OPNsense-15.1.8-vga-amd64.img.bz2) = c20fee3989a786e12ba0ec3f0e565660
# MD5 (OPNsense-15.1.8-cdrom-i386.iso.bz2) = 8b8459017333d654c8b1a7f246a4e250
# MD5 (OPNsense-15.1.8-serial-i386.img.bz2) = 6f2e9656a02f32cebf18c9b31b5439f2
# MD5 (OPNsense-15.1.8-vga-i386.img.bz2) = 4cbbebe46142d1e954c76383340f61e6
```

--------------------------------

### SHA256 Checksums for 25.7.r1 Images

Source: https://docs.opnsense.org/releases/CE_25.7.html

Verification checksums for the OPNsense 25.7.r1 installation media.

```text
# SHA256 (OPNsense-25.7.r1-dvd-amd64.iso.bz2) = 1e8e874942f6b7293f345e854afcae62baa0b699b09c0dd49d1942f34eadfbfe
# SHA256 (OPNsense-25.7.r1-nano-amd64.img.bz2) = f93eacc72c7f75ccfdd2189e4d414fff523f2204c5e11f6ad9c57c55a6c60568
# SHA256 (OPNsense-25.7.r1-serial-amd64.img.bz2) = 89602b42f7631dff10cef4303753f9377c0995a0ac3966ef8564fe0414ac6cff
# SHA256 (OPNsense-25.7.r1-vga-amd64.img.bz2) = 77e2aeb3acacd7d9d252e30d09463c793ae641cf2938ddd90819529043b5e3e8
```

--------------------------------

### POST /api/qemuguestagent/service/start

Source: https://docs.opnsense.org/development/api/plugins/qemuguestagent.html

Starts the QEMU Guest Agent service.

```APIDOC
## POST /api/qemuguestagent/service/start

### Description
Starts the QEMU Guest Agent service.

### Method
POST

### Endpoint
/api/qemuguestagent/service/start
```

--------------------------------

### Example Configuration Output

Source: https://docs.opnsense.org/development/examples/helloworld.html

Sample content of the generated configuration file.

```ini
[general]
SMTPHost=127.0.0.1
FromEmail=sample@example.com
ToEmail=sample@example.com
Subject=test
```

--------------------------------

### Example API JSON Response

Source: https://docs.opnsense.org/development/examples/helloworld.html

The expected JSON structure returned by the settings get action.

```json
{
    "helloworld": {
        "general": {
        "Enabled": "1",
        "SMTPHost": "",
        "FromEmail": "sample@example.com",
        "ToEmail": "",
        "%ToEmail": "Enter recipient here",
        "Description": ""
        }
    }
}
```

--------------------------------

### OPNsense 20.7.r1 SHA256 Checksums

Source: https://docs.opnsense.org/releases/CE_20.7.html

SHA256 checksums for verifying the integrity of the 20.7.r1 installation images.

```text
# SHA256 (OPNsense-20.7.r1-OpenSSL-dvd-amd64.iso.bz2) = d54dca6390497d45b831f68f352fccf84881aac78a360247965e5c9b36fbfded
# SHA256 (OPNsense-20.7.r1-OpenSSL-nano-amd64.img.bz2) = f78d51d53bf663df2d49a3724812893d8c55234ab8d4a9232663fa581496edbe
# SHA256 (OPNsense-20.7.r1-OpenSSL-serial-amd64.img.bz2) = 984f8c9d63598f061cc8995245dea73703532c1bb688ac87cdb1e510fb53b80e
# SHA256 (OPNsense-20.7.r1-OpenSSL-vga-amd64.img.bz2) = 711811e0a7d37d323a060c52590daa9f024e77c6da627530c6596367a09b412d
```

--------------------------------

### Calculate Disk Space Requirements

Source: https://docs.opnsense.org/vendor/sunnyvalley/zenarmor_hardwarerequirements.html

Example calculation for determining monthly disk space usage based on throughput and active hours.

```text
5 MB x 12 hours x 100 Mbps = 6 GB per day.
6 GB x 7 days a week = 42 GB per week.
42 x 4 weeks a month = 168 GB per month.
```

--------------------------------

### SHA256 Checksums for 19.1.4 Images

Source: https://docs.opnsense.org/releases/CE_19.1.html

Verification checksums for the OPNsense 19.1.4 installation images.

```text
# SHA256 (OPNsense-19.1.4-OpenSSL-dvd-amd64.iso.bz2) = 5f2e64797fce03d4d47050894c38e8e176fda6281009abd36f60d788d3e29d42
# SHA256 (OPNsense-19.1.4-OpenSSL-nano-amd64.img.bz2) = ee5171fb837884fffd29c6e75cb089dc4020fb89459143bd9e7b859b1da3fd89
# SHA256 (OPNsense-19.1.4-OpenSSL-serial-amd64.img.bz2) = 07868978903220bf9dee26c936d25140df07ec9c02cb8c480bd8619e69c562a0
# SHA256 (OPNsense-19.1.4-OpenSSL-vga-amd64.img.bz2) = e473bc645778c95596639056ecc8ef92a12a7fd1cdc52cd0b1f6294a64561311
```

--------------------------------

### Checksums for OPNsense 20.1 Images

Source: https://docs.opnsense.org/releases/CE_20.1.html

SHA256 checksums for verifying the integrity of the 20.1 installation images.

```text
# SHA256 (OPNsense-20.1-OpenSSL-dvd-amd64.iso.bz2) = 4b15e9b3d72732d325c5eaf46ba34575d4de8cdc3e3ac1b10666c7372563be6d
# SHA256 (OPNsense-20.1-OpenSSL-nano-amd64.img.bz2) = 27544a78ae03d480a483cfd2e7cfa703b60e50938a1ed188ec3ccde6c426fefe
# SHA256 (OPNsense-20.1-OpenSSL-serial-amd64.img.bz2) = f93bbcbe92059c5de49f22d485da292952b48658a28d1cdaf83191e8c95c03c2
# SHA256 (OPNsense-20.1-OpenSSL-vga-amd64.img.bz2) = 019a877c4b4cb96cfda62d041774a91c030c5a8ecd58f8c3fd0067c7ac392982
```

```text
# SHA256 (OPNsense-20.1-OpenSSL-dvd-i386.iso.bz2) = 36146d0a066d9d696433599487e2a538ee5575a6b3d631293ad9e14e5fbbc6e0
# SHA256 (OPNsense-20.1-OpenSSL-nano-i386.img.bz2) = 0980f49d1b3445505fd1db27ab070886a706388d3aa16d7c8d953f279b7e3b11
# SHA256 (OPNsense-20.1-OpenSSL-serial-i386.img.bz2) = 322adbafe331ef7232c08d839a6f355ee633f5a662009b1801ebad0edab03d73
# SHA256 (OPNsense-20.1-OpenSSL-vga-i386.img.bz2) = 8bdd109015d7d54d382c7293bdf8fac6397a6c2e37662b73647c276e98c19d64
```

--------------------------------

### Install FreeRADIUS on Ubuntu

Source: https://docs.opnsense.org/manual/how-tos/accounting.html

Command to install the FreeRADIUS package on an Ubuntu system.

```bash
apt-get install freeradius
```

--------------------------------

### SHA256 Checksums for 22.1.r1 Images

Source: https://docs.opnsense.org/releases/CE_22.1.html

SHA256 checksums for verifying the OPNsense 22.1.r1 installation images.

```text
# SHA256 (OPNsense-22.1.r1-OpenSSL-dvd-amd64.iso.bz2) = c6388b7960ec8e65a89dd8baf0a118410340f94b260bfea64faf3008c525376e
# SHA256 (OPNsense-22.1.r1-OpenSSL-nano-amd64.img.bz2) = 10aa979b754c8d4b0ffdad4c8befa1ab3b0bb146981333d5731ffa5c7b99b9b3
# SHA256 (OPNsense-22.1.r1-OpenSSL-serial-amd64.img.bz2) = e09addbab2a479cd5155926373c2bbe141d3f6aa057f044b43d9ad11fcc75e85
# SHA256 (OPNsense-22.1.r1-OpenSSL-vga-amd64.img.bz2) = 7f02135fdddf6227fd1ef4bb3012ce83b622bf7ec18baadaf03105792a38576c
```

--------------------------------

### Verify Release File Integrity

Source: https://docs.opnsense.org/releases/CE_15.7.html

Checksum values for OPNsense 15.7.18 installation images to ensure file integrity.

```bash
# SHA256 (OPNsense-15.7.18-OpenSSL-cdrom-amd64.iso.bz2) = f193e04ce0f0d2b1eab54b246f5b4931cdd50ed0a97015a363e8ece24449825d
# SHA256 (OPNsense-15.7.18-OpenSSL-nano-amd64.img.bz2) = f1cfa7ff9f2fe30361f92773aa6fe416ac5bb3e27bd98c1b470f32ceea9ee4eb
# SHA256 (OPNsense-15.7.18-OpenSSL-serial-amd64.img.bz2) = e95698fac21e8bef7ac8c8e66406fcbece583a32db325da19be810d33a714147
# SHA256 (OPNsense-15.7.18-OpenSSL-vga-amd64.img.bz2) = 3cc366d5e48f74bba5a07466cbaa2808d98fba422814d3cafbbffb5e2847c888
# SHA256 (OPNsense-15.7.18-OpenSSL-cdrom-i386.iso.bz2) = 57229a3873d6020979e8ebb1dff1c97b14166afff7da6d5ca7e5b32a17e40207
# SHA256 (OPNsense-15.7.18-OpenSSL-nano-i386.img.bz2) = e89464b51c52c02a9d1a15d168190f23b7d72030be5b31db4bd5a78cfa0a108f
# SHA256 (OPNsense-15.7.18-OpenSSL-serial-i386.img.bz2) = 0eb92ffcbe6d4152b79e89e71984b5a3d00cf0e2e0946868331fd93a506cf54c
# SHA256 (OPNsense-15.7.18-OpenSSL-vga-i386.img.bz2) = 284157e596dd77551ce6ce4e5b661614273abcfaa590f6d4553903172332f370
```

```bash
# MD5 (OPNsense-15.7.18-OpenSSL-cdrom-amd64.iso.bz2) = 7718af5a632a426c7e3832e4cf6e7f91
# MD5 (OPNsense-15.7.18-OpenSSL-nano-amd64.img.bz2) = 88018ba7ec8c6e6906054a03106020c6
# MD5 (OPNsense-15.7.18-OpenSSL-serial-amd64.img.bz2) = 50879c1a12ca65b95ebd5a77eea389e5
# MD5 (OPNsense-15.7.18-OpenSSL-vga-amd64.img.bz2) = 764c8a9c42b13cdfc73d1025e9795901
# MD5 (OPNsense-15.7.18-OpenSSL-cdrom-i386.iso.bz2) = ce115445d922883c1e57457503b7d044
# MD5 (OPNsense-15.7.18-OpenSSL-nano-i386.img.bz2) = 947d4955775295f09ef849b8ac7757a6
# MD5 (OPNsense-15.7.18-OpenSSL-serial-i386.img.bz2) = 4b7affd7c051e15171ef2ee4869739b6
# MD5 (OPNsense-15.7.18-OpenSSL-vga-i386.img.bz2) = 59b796e2a2a68cb699bb67b79f08c808
```

--------------------------------

### GET /api/oidc/rp/login/<<appcode>>

Source: https://docs.opnsense.org/vendor/deciso/oidc.html

Initiates the OIDC login flow by locating the provider URI.

```APIDOC
## GET /api/oidc/rp/login/<<appcode>>

### Description
Locates the provider URI and initiates the OIDC login flow.

### Method
GET

### Endpoint
/api/oidc/rp/login/<<appcode>>

### Parameters
#### Path Parameters
- **appcode** (string) - Required - The application code identifier for the OIDC service.
```

--------------------------------

### Example Security Audit Report

Source: https://docs.opnsense.org/security.html

A sample output from the OPNsense security audit feature, detailing vulnerable packages, incident descriptions, CVE identifiers, and reference links.

```text
1 python313-3.13.15 is vulnerable:
2   Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines
3   CVE: CVE-2025-15367
4   WWW: https://vuxml.FreeBSD.org/freebsd/6d3488ae-2e0f-11f1-88c7-00a098b42aeb.html
```

--------------------------------

### View Security Audit Report

Source: https://docs.opnsense.org/security.html

Example output from the integrated security audit tool showing a clean system status.

```text
***GOT REQUEST TO AUDIT SECURITY***
Currently running OPNsense 22.1.8_1 (amd64/OpenSSL) at Tue May 31 09:01:04 CEST 2022
vulnxml file up-to-date
0 problem(s) in 0 installed package(s) found.
***DONE***
```

--------------------------------

### SHA-256 Checksums for 18.7.r1 Images

Source: https://docs.opnsense.org/releases/CE_18.7.html

Checksums for verifying the integrity of the amd64 and i386 installation images.

```text
# SHA256 (OPNsense-18.7.r1-OpenSSL-dvd-amd64.iso.bz2) = c5ca07eefde68d16d0fc060fd2fa0be12d77752d5376b5483103c8d1901975ca
# SHA256 (OPNsense-18.7.r1-OpenSSL-nano-amd64.img.bz2) = c2252d379c10936f98ed02044dc61eda13b8b3ffe08c0e9e7f0a70a462fcb005
# SHA256 (OPNsense-18.7.r1-OpenSSL-serial-amd64.img.bz2) = f48a065e8e6d0ed8f38737d46d991df4c231ef5ce60f022eb2252a41e55842fe
# SHA256 (OPNsense-18.7.r1-OpenSSL-vga-amd64.img.bz2) = 4d6237590df8cb918fff580f7cf6fed08a9b1fbd224061870bf7e4cf4e394c18
```

```text
# SHA256 (OPNsense-18.7.r1-OpenSSL-dvd-i386.iso.bz2) = 3fc4405619763cdcf08620a029a1d5270271b2e796af7e4b8869995e28ad4f68
# SHA256 (OPNsense-18.7.r1-OpenSSL-nano-i386.img.bz2) = 1efc4695be64cfee87603cea77d6e89b8b09c33fa1a491d15f0b652234c1f21a
# SHA256 (OPNsense-18.7.r1-OpenSSL-serial-i386.img.bz2) = f010ca0d33addeb94f436a551a61418f95fde9bd7511c88b75a7131ca65b162f
# SHA256 (OPNsense-18.7.r1-OpenSSL-vga-i386.img.bz2) = aba557b88ae27ecd5d301fa32f3910a7e5499491b8263e21a722976c0da714fc
```

--------------------------------

### Define HelloWorld action configuration

Source: https://docs.opnsense.org/development/examples/helloworld.html

Register a new action in the actions.d directory to map a command to a script.

```ini
[test]
command:/usr/local/opnsense/scripts/helloworld/testConnection.py
parameters:
type:script_output
message:hello world module test
```

--------------------------------

### Verify OPNsense 26.1.6 ISO and Image Integrity

Source: https://docs.opnsense.org/releases/CE_26.1.html

Use these SHA256 checksums to verify the integrity of the downloaded OPNsense 26.1.6 installation media.

```text
# SHA256 (OPNsense-26.1.6-dvd-amd64.iso.bz2) = 6ba3633d9c0f96d82c792015a45f4b8aac45ea8fa2bdba3c5e534d0c90a4f08c
# SHA256 (OPNsense-26.1.6-nano-amd64.img.bz2) = 3c16267c791abfc3e41d5249fcb0c245c03cb91e2f1aa4d53017f0f3454d03a1
# SHA256 (OPNsense-26.1.6-serial-amd64.img.bz2) = 60e698b7f935b647b72a424c78acaa1772a050bb4bd593ca001ea9a1634d5643
# SHA256 (OPNsense-26.1.6-vga-amd64.img.bz2) = cf8deca3033b66138930d417c879cb93b7930d1ca8dabd7e1aea914f9a551f4a
```

--------------------------------

### SHA-256 Checksums for 18.7 Images

Source: https://docs.opnsense.org/releases/CE_18.7.html

Checksums for verifying the integrity of amd64 and i386 installation images.

```text
# SHA256 (OPNsense-18.7-OpenSSL-dvd-amd64.iso.bz2) = 6b3528f8dea8de5c96de5547636fd51c40382c245b30eb215608acbd04fb7e91
# SHA256 (OPNsense-18.7-OpenSSL-nano-amd64.img.bz2) = cb0272f0bd945ea8070d9a40af2cd47a3b68e9bd389395b285bb9ab4128d1f00
# SHA256 (OPNsense-18.7-OpenSSL-serial-amd64.img.bz2) = a4556080532d22e9ab296e2c6e163b3d65d5fe54a642253e1c01a22721afa850
# SHA256 (OPNsense-18.7-OpenSSL-vga-amd64.img.bz2) = 4408840fba4177d44503968fce44d8ca7180003728660fd9c0a2e6920346008c
```

```text
# SHA256 (OPNsense-18.7-OpenSSL-dvd-i386.iso.bz2) = 8ea49dcb512365a1e92e94fb38f1b4a85463ffacfb98c055e84e6340a6321ecf
# SHA256 (OPNsense-18.7-OpenSSL-nano-i386.img.bz2) = bdd753a63367944452d2d5d1e73e4aa9f3d607012d10c4274420d23867a4fbad
# SHA256 (OPNsense-18.7-OpenSSL-serial-i386.img.bz2) = f74f5fd1c24cc54002fa9b99a0c10b4402b3f748a315ff302126acb154cd2633
# SHA256 (OPNsense-18.7-OpenSSL-vga-i386.img.bz2) = 52208b57f9e89d235411df33faac71b8d9872d50947ff4c0dca6f552424a4d95
```

--------------------------------

### MD5 Checksums for OPNsense 17.1

Source: https://docs.opnsense.org/releases/CE_17.1.html

Use these MD5 checksums to verify the integrity of the downloaded OPNsense 17.1 installation images.

```text
# MD5 (OPNsense-17.1-OpenSSL-cdrom-amd64.iso.bz2) = b39a8440377b6a2aae5832e3caea23d7
# MD5 (OPNsense-17.1-OpenSSL-nano-amd64.img.bz2) = 583c7d4a4c4263d51e0fa153f8c021e4
# MD5 (OPNsense-17.1-OpenSSL-serial-amd64.img.bz2) = d4da49aa8f4d24ab0dc8ed7f025b7b46
# MD5 (OPNsense-17.1-OpenSSL-vga-amd64.img.bz2) = 5ea6b7771a35fbdd97abc99ca4da1b4c
# MD5 (OPNsense-17.1-OpenSSL-cdrom-i386.iso.bz2) = c8b63d4018ab072f9a2370e1040381d8
# MD5 (OPNsense-17.1-OpenSSL-nano-i386.img.bz2) = 3989eb61efcc7057166e64662d26714a
# MD5 (OPNsense-17.1-OpenSSL-serial-i386.img.bz2) = 4ca5a146a050e46deffdac001e7b3f0d
# MD5 (OPNsense-17.1-OpenSSL-vga-i386.img.bz2) = 888f3b23a381d93600596f86c0f94cd4
```

--------------------------------

### Prepare web directory

Source: https://docs.opnsense.org/manual/how-tos/nginx_hosting.html

Commands to create a directory for web content and verify its permissions.

```bash
# create a directory
mkdir -p /srv/web_application1
cd /srv
stat web_application1
# Example Result:
# 86 18009 drwxr-xr-x 2 root wheel 14050 512 "Aug 31 18:28:19 2018"
#  "Aug 31 18:28:19 2018" "Aug 31 18:28:19 2018" "Aug 31 18:28:19 2018"
#  32768 8 0 web_application1
#
# as you can see, everyone can read (r) and switch into the directory (x))
#
# do this if the directory is not readable or executable:
chmod +rx web_application1
```

--------------------------------

### Verify OPNsense 22.1.2 ISO and Image Integrity

Source: https://docs.opnsense.org/releases/CE_22.1.html

Use these SHA256 checksums to verify the integrity of the downloaded OPNsense 22.1.2 installation media.

```text
# SHA256 (OPNsense-22.1.2-OpenSSL-dvd-amd64.iso.bz2) = d066d5620e28c22ff1d8de18532b61f8c7317b3258d5bdafb6a7a8dbb1eea002
# SHA256 (OPNsense-22.1.2-OpenSSL-nano-amd64.img.bz2) = dea720e15e67063d839bbf48017d32eb27071d58afee36bec40029319f5cc47e
# SHA256 (OPNsense-22.1.2-OpenSSL-serial-amd64.img.bz2) = 1b32287c13cc445a9a7a365b7879d00d3413ea53faf4cb23b3ef77b7916a1b7c
# SHA256 (OPNsense-22.1.2-OpenSSL-vga-amd64.img.bz2) = c6bbc0755d9458cc6484a98f074b62beaa30c5f02bd728ee1b0e896d2613b4b4
```

--------------------------------

### Example of an A RRset with multiple values

Source: https://docs.opnsense.org/vendor/deciso/opndns.html

Shows how two IPv4 addresses for the same host are represented as a single RRset.

```text
host1.internal 300 IN A 192.168.1.10
host1.internal 300 IN A 192.168.1.11
```
Tokens:
Raw