firewall-appliance

Manage and troubleshoot OPNsense and pfSense firewalls via SSH.

2|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/iuliandita/skills --skill firewall-appliance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: firewall-appliance
Source: https://github.com/iuliandita/skills/tree/main/skills/firewall-appliance
Command: npx skills add https://github.com/iuliandita/skills --skill firewall-appliance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides a safe, structured way to manage FreeBSD-based firewall appliances (OPNsense and pfSense) via SSH, preventing common configuration errors that could lead to remote lockout or network instability.

Core Features & Use Cases

  • Platform-Aware Management: Executes commands tailored to the specific differences between OPNsense and pfSense, such as service control and configuration paths.
  • Operational Safety: Enforces pre-flight checks, configuration backups, and dry-run validations for firewall rules to ensure network connectivity is preserved.
  • Use Case: Use this skill to safely add a new VLAN interface, configure firewall rules for IoT isolation, or troubleshoot connectivity issues by analyzing state tables and logs on your firewall appliance.

Quick Start

Use the firewall-appliance skill to list the current firewall rules and state table entries on the OPNsense device.

Frequently Asked Questions about firewall-appliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage pfSense firewall rules remotely without risking lockout?

You can audit OPNsense and pfSense firewall rules safely by executing secure SSH commands that include pre-flight checks and configuration backups to prevent management lockout and ensure configuration integrity.

Does this approach support both OPNsense and pfSense platforms?

Yes, OPNsense and pfSense platforms are both supported through platform-aware management that executes commands tailored to their specific differences, such as distinct service control syntax and configuration paths on FreeBSD-based systems.

How do I troubleshoot network connectivity issues on a FreeBSD firewall appliance?

Troubleshoot network connectivity on FreeBSD firewall appliances by running network diagnostics through secure SSH to analyze state tables and logs on OPNsense or pfSense, identifying dropped packets or misconfigured interface settings.

What's the best way to configure VLAN interfaces for IoT isolation on OPNsense?

The best way to configure VLAN interfaces for IoT isolation on OPNsense is using structured command execution with dry-run validations for firewall rules, ensuring network segmentation is applied without disrupting existing connectivity.

Why do I need dry-run validations when hardening firewall configurations?

Dry-run validations are needed when hardening firewall configurations because they verify new firewall rules before deployment, preventing common configuration errors that could lead to remote management lockout or network instability on FreeBSD appliances.