https://marmits.com/w/index.php?action=history&feed=atom&title=Opnsense_commandes
Opnsense commandes - Historique des versions
2026-05-25T03:51:25Z
Historique des versions pour cette page sur le wiki
MediaWiki 1.43.8
https://marmits.com/w/index.php?title=Opnsense_commandes&diff=3787&oldid=prev
Geo : /* 🧱 OPNsense – Commandes essentielles (condensé) */
2026-03-23T14:54:15Z
<p><span class="autocomment">🧱 OPNsense – Commandes essentielles (condensé)</span></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="fr">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Version précédente</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version du 23 mars 2026 à 16:54</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4">Ligne 4 :</td>
<td colspan="2" class="diff-lineno">Ligne 4 :</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== 🔥 Firewall (pf) ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== 🔥 Firewall (pf) ==</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><syntaxhighlight lang="sh">pfctl -sr # Toutes les règles firewall</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><syntaxhighlight lang="sh"></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>pfctl -sr # Toutes les règles firewall</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>pfctl -sr | grep "vlan10" # Règles contenant 'vlan10'</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>pfctl -sr | grep "vlan10" # Règles contenant 'vlan10'</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>pfctl -sr | grep "igb0" # Règles liées à une interface physique</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>pfctl -sr | grep "igb0" # Règles liées à une interface physique</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l12">Ligne 12 :</td>
<td colspan="2" class="diff-lineno">Ligne 13 :</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>pfctl -e # Réactiver firewall</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>pfctl -e # Réactiver firewall</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>cat /tmp/rules.debug # Règles compilées</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>cat /tmp/rules.debug # Règles compilées</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>pfctl -nf /tmp/rules.debug # Vérifier syntaxe</syntaxhighlight></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>pfctl -nf /tmp/rules.debug # Vérifier syntaxe</div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> </div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">pfctl -Fs # Supprimer tous les states</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">pfctl -k 192.168.10.5 # Supprimer les states liés à une IP</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">pfctl -k 192.168.10.5 -k 8.8.8.8 # Supprimer les states liés à un pair source/destination</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div></syntaxhighlight></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>-----</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>-----</div></td></tr>
<!-- diff cache key wiki2025-mar_:diff:1.41:old-3785:rev-3787:php=table -->
</table>
Geo
https://marmits.com/w/index.php?title=Opnsense_commandes&diff=3785&oldid=prev
Geo : Page créée avec « <span id="opnsense-commandes-essentielles-condensé"></span> = 🧱 '''OPNsense – Commandes essentielles (condensé)''' = == 🔥 Firewall (pf) == <syntaxhighlight lang="sh">pfctl -sr # Toutes les règles firewall pfctl -sr | grep "vlan10" # Règles contenant 'vlan10' pfctl -sr | grep "igb0" # Règles liées à une interface physique pfctl -sn # Règles NAT (SNAT/DNAT) pfctl -ss... »
2026-03-23T14:49:37Z
<p>Page créée avec « <span id="opnsense-commandes-essentielles-condensé"></span> = 🧱 '''OPNsense – Commandes essentielles (condensé)''' = == 🔥 Firewall (pf) == <syntaxhighlight lang="sh">pfctl -sr # Toutes les règles firewall pfctl -sr | grep "vlan10" # Règles contenant 'vlan10' pfctl -sr | grep "igb0" # Règles liées à une interface physique pfctl -sn # Règles NAT (SNAT/DNAT) pfctl -ss... »</p>
<p><b>Nouvelle page</b></p><div><span id="opnsense-commandes-essentielles-condensé"></span><br />
= 🧱 '''OPNsense – Commandes essentielles (condensé)''' =<br />
<br />
== 🔥 Firewall (pf) ==<br />
<br />
<syntaxhighlight lang="sh">pfctl -sr # Toutes les règles firewall<br />
pfctl -sr | grep "vlan10" # Règles contenant 'vlan10'<br />
pfctl -sr | grep "igb0" # Règles liées à une interface physique<br />
pfctl -sn # Règles NAT (SNAT/DNAT)<br />
pfctl -ss # États actifs<br />
pfctl -d # Désactiver firewall (danger) <br />
pfctl -e # Réactiver firewall<br />
cat /tmp/rules.debug # Règles compilées<br />
pfctl -nf /tmp/rules.debug # Vérifier syntaxe</syntaxhighlight><br />
<br />
-----<br />
<br />
== 🧩 Interfaces &amp; VLAN ==<br />
<br />
<syntaxhighlight lang="sh">ifconfig # Lister interfaces/VLAN <br />
ifconfig igb0 # Interface spécifique<br />
ifconfig vlan10 create # Créer VLAN (rare en CLI)</syntaxhighlight><br />
<br />
-----<br />
<br />
== 🚏 Routes ==<br />
<br />
<syntaxhighlight lang="sh">netstat -rn # Table de routage <br />
route add -net 192.168.50.0/24 192.168.10.1<br />
route delete 192.168.50.0/24<br />
traceroute 8.8.8.8</syntaxhighlight><br />
<br />
-----<br />
<br />
== 🔄 NAT ==<br />
<br />
<syntaxhighlight lang="sh">pfctl -sn # Voir règles NAT (SNAT/DNAT) <br />
cat /tmp/rules.debug # Vérifier NAT généré</syntaxhighlight><br />
<br />
-----<br />
<br />
== 🧪 Diagnostics utiles ==<br />
<br />
<syntaxhighlight lang="sh">ping 1.1.1.1<br />
sockstat -4 # Ports IPv4 en écoute<br />
sockstat -6 # Ports IPv6 en écoute</syntaxhighlight><br />
<br />
-----<br />
<br />
[[Catégorie:Opnsense]]</div>
Geo