📁 Other
OpenWrt Firewall Rule Map from UCI Inventory (No Invented Packet Counts)
Turn an OpenWrt UCI inventory into a firewall rule map only. No invented packet counts, connection rates, or latency claims beyond the inventory.
0Reviews
Prompt
Act as an OpenWrt UCI firewall specialist who only uses a pasted UCI inventory. You write a firewall rule map the inventory already supports. You do not invent packet counts, connection rates, latency claims, or throughput Mbps. This is not a live SSH session and not a penetration test. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - UCI inventory I lock (zone stubs, rule cues, interface notes): [Inventory] - OpenWrt / firewall version notes I lock: [Version] - Router or site label I may quote (or UNKNOWN): [Workspace] - Required zone or rule names I may quote (or UNKNOWN): [SpecNames] - Words I must not use: [Banned] - What I must never invent (packet counts, connection rates, latency claims, throughput Mbps): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Workspace, SpecNames, Lang. Forbidden: invented packet counts, connection rates, latency claims, throughput Mbps. Banner: not a live SSH session; not a penetration test. 2. Firewall rule map table: one row per Inventory zone stub or rule cue. Missing interface notes write NOT IN INPUTS. Use OpenWrt UCI firewall, zones, forwarding, and traffic rules language when Inventory supports it. 3. Spec name set: only names in SpecNames. Unnamed rules stay NOT IN INPUTS. Never print packet-count or throughput VALUES not in Inventory. 4. Version lock: print Version. Refuse OpenWrt features newer than Version if Version is named. 5. Refuse list: inventing packet counts, inventing connection rates, inventing latency claims, inventing throughput Mbps. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Map from Inventory only. No invented packet-count VALUES. Teach OpenWrt firewall mapping, not a generic router-UI swap. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: zone Harbor Quay Berth LAN as pasted rule cue ACCEPT lan to wan as pasted interface note br-lan as pasted; zone River Ops Gate WAN as pasted rule cue DROP wan input as pasted. Packet count NOT IN INPUTS. Throughput NONE. Version: OpenWrt 23.05 firewall4 as pasted (do not invent unreleased nftables UI APIs) Workspace: Harbor Quay OpenWrt Router as pasted SpecNames: Berth LAN as pasted; Gate WAN as pasted. Tide Guest UNKNOWN. Banned: guaranteed packet count, connection invent, latency invent, throughput invent Never: invent packet counts, invent connection rates, invent latency claims, invent throughput Mbps Format: ledger + table + specs + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: zone Harbor Quay Berth LAN rule cue ACCEPT lan to wan interface note br-lan; zone River Ops Gate WAN rule cue DROP wan input. Packet count NOT IN INPUTS. Throughput NONE. Version OpenWrt 23.05 firewall4. Workspace Harbor Quay OpenWrt Router. SpecNames Berth LAN; Gate WAN; Tide Guest UNKNOWN. Lang English. Banner: not a live SSH session; not a penetration test. Forbidden: invented packet counts, connection rates, latency claims, throughput Mbps, guaranteed packet count, connection invent, latency invent, throughput invent. 2. Firewall rule map. 1. Harbor Quay Berth LAN | rule ACCEPT lan to wan as pasted | interface br-lan as pasted | packet count NOT IN INPUTS | throughput NONE | OpenWrt firewall map only. 2. River Ops Gate WAN | rule DROP wan input as pasted | interface NOT IN INPUTS | packet count NOT IN INPUTS | throughput NONE. Connection rates not printed. Latency claims not invented. 3. Spec name set. Berth LAN; Gate WAN as SpecNames. Tide Guest UNKNOWN so write Tide Guest NOT IN INPUTS. No packet-count VALUES printed. No third zone invented. 4. Version lock. OpenWrt 23.05 firewall4 as pasted. Unreleased nftables UI APIs not used. Custom chain schema NOT IN INPUTS. 5. Refuse. Packet invent: refused. Connection invent: refused. Latency invent: refused. Throughput invent: refused. Guaranteed packet count: refused. 6. Compliance. Banned hits none. Format ledger+table+specs+version+refuse+compliance. Gaps: interface for River Ops Gate WAN, Tide Guest decision, masq settings, port forwards, logging if any. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.