Docs ब्राउज़ करें

Firewalls

OPNsense गाइड

OPNsense में Cybora threat feeds को URL Table Aliases के रूप में configure करें और malicious IP infrastructure block करने के लिए firewall rules में use करें.

अंतिम अपडेट: 2 सितंबर 2026

इस पेज पर

Is guide ka upyog karke OPNsense me Cybora ko native firewall aliases ke saath integrate karein. OPNsense me sabse clean native workflow ye hai ki Cybora ko IP-based URL Table alias ke roop me consume kiya jaye aur phir us alias ko firewall rules me use kiya jaye.

What OPNsense can do with a Cybora feed

  • OPNsense remote IP feeds ko URL Table alias me load kar sakta hai aur alias ko automatically updated rakhta hai.
  • Imported alias ko firewall rules me wahi use kiya ja sakta hai jahan aap normal host ya network alias use karte hain.
  • Domain feeds ko Unbound DNS blocklist function ke through alag se add kiya ja sakta hai.
  • Complete URLs ya paths wale Cybora URL feeds ko OPNsense aliases ya Unbound DNS blocklists ke through directly import nahi kiya ja sakta. URL-path filtering ke liye alag se configured web proxy aur different integration format chahiye.

Har feed type ke liye sahi integration chunen

  • IPv4: Firewall > Aliases me URL Table (IPs) select karein aur type=ipv4 wala Cybora feed URL use karein. Yahan “URL” sirf download location ko refer karta hai. Download ki gayi file me phir bhi IP addresses hone chahiye. URL (IPs) select na karein, kyunki wo list ko sirf ek baar download karta hai. URL Table in JSON format (IPs) bhi sahi nahi hai, kyunki Cybora plain text deliver karta hai, JSON nahi.
  • Domain: Alias type dropdown me koi option select na karein. Iske bajay type=domain wala feed URL Services > Unbound DNS > Blocklists ke URLs of Blocklists field me add karein.
  • URL: Cybora type=url feed is alias workflow ke saath directly compatible nahi hai. URL Table (IPs) complete URLs accept nahi karta; wo URL se sirf IP addresses download karta hai. JSON variant bhi sirf IP addresses extract karta hai, isliye wahi URL indicators JSON me dene se limitation solve nahi hogi. OPNsense optional web proxy jaise os-OPNProxy ke through domains aur URL paths filter kar sakta hai, lekin iske liye separate proxy configuration, complete encrypted paths ke liye HTTPS inspection aur proxy-compatible feed integration chahiye.

Before you start

  • Aisi OPNsense release use karein jo Firewall > Aliases aur URL Table aliases support karti ho.
  • Ensure karein ki firewall aapke Cybora feed URL ko HTTPS ke through reach kar sake.
  • Native OPNsense alias workflow ke liye IP-based Cybora feed use karein.
  • Remote feed plain text me hona chahiye, ek IP address per line.

Create the alias

Firewall > Aliases ka overview starting point hai. Naya alias banane ke liye plus button select karein.

OPNsense alias overview jisme naya alias add karne ka plus button highlight kiya gaya hai

  1. Firewall > Aliases par jayen aur ek naya alias add karein.
  2. Alias ka clear naam aur description dein.
  3. Alias type ko URL Table (IPs) par set karein.
  4. Apna Cybora feed URL content field me paste karein.
  5. Refresh frequency ko apne Cybora plan ke jitna kareeb ho sake utna set karein. Feed ko plan se zyada frequently query na karein. Allowed interval ke andar sirf ek request permitted hai. Excessive polling ki wajah se feed block ho sakta hai.
  6. Alias save karein aur changes apply karein.

Niche diya gaya example URL Table (IPs) type, har ghante refresh aur redacted key wali Cybora feed URL use karta hai.

Cybora IPv4 feed ko URL Tables IPs alias ke roop me configure karne ka OPNsense dialog

Unbound DNS ke through domain feed add karein

  1. Services > Unbound DNS > Blocklists par jayen.
  2. Blocklist function enable karein aur type=domain wala Cybora feed URL URLs of Blocklists me add karein.
  3. Configuration save aur apply karein.
  4. System > Settings > Cron me Update Unbound DNSBLs task add karein, taaki OPNsense list ko automatically refresh kare. Interval aisa rakhein ki feed ko Cybora plan ki permission se zyada frequently query na kiya jaye.
  5. Ensure karein ki protected clients OPNsense Unbound DNS ko resolver ke roop me use karte hain. External DNS resolver ko directly bheji gayi queries is domain blocking ko bypass kar sakti hain.

Cybora domain feed plain text me hota hai aur har line me ek domain hota hai. OPNsense # se shuru hone wali comment lines ko ignore karta hai. Domain feed listed domains ki DNS resolution block karta hai, lekin ek hi domain par alag URL paths ko distinguish nahi kar sakta.

Apply the alias in policy

  1. Wahi firewall rule kholen jahan aap imported indicators ko block ya match karna chahte hain.
  2. Cybora alias ko source ya destination ke roop me use karein, apni policy design ke hisab se.
  3. Action ko block, reject ya kisi aur suitable option par set karein.
  4. Rule par logging enable karein taaki live traffic me matches confirm kiye ja sakein.
  5. Updated firewall configuration apply karein.

Validation

  1. Firewall > Diagnostics > Aliases par jaakar loaded alias contents dekhein.
  2. Confirm karein ki alias refresh ke baad Last updated badalta hai.
  3. Find references ya live firewall logs ka use karke verify karein ki alias intended rules me match ho raha hai.
  4. Known matching traffic ke saath test karein aur confirm karein ki rule expected behavior dikha raha hai.

Further reading