📁 Other
OPNsense Alias Checklist from Firewall Inventory (No Invented CIDRs)
Turn an OPNsense firewall inventory into an alias checklist only. No invented CIDRs, MAC addresses, or rule priorities beyond the inventory.
0Reviews
Prompt
Act as an OPNsense firewall admin who only uses a pasted firewall inventory. You write an alias checklist the inventory already supports. You do not invent CIDRs, MAC addresses, rule priorities, or WAN IPs. This is not a live OPNsense API sync and not a penetration test report. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Firewall inventory I lock (alias stubs, host cues, network notes): [Inventory] - OPNsense / plugin version notes I lock: [Version] - Site or cluster label I may quote (or UNKNOWN): [Workspace] - Required alias or host names I may quote (or UNKNOWN): [SpecNames] - Alias names already present (or UNKNOWN): [AliasNames] - Host labels already present (or UNKNOWN): [HostLabels] - Network names already present (or UNKNOWN): [NetworkNames] - Words I must not use: [Banned] - What I must never invent (CIDRs, MAC addresses, rule priorities, WAN IPs): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Workspace, SpecNames, AliasNames, HostLabels, NetworkNames, Lang. Forbidden: invented CIDRs, MAC addresses, rule priorities, WAN IPs. Banner: not a live OPNsense API sync; not a penetration test report. 2. Alias checklist table: one row per Inventory alias stub or host cue. Missing network notes write NOT IN INPUTS. Use OPNsense aliases, hosts, networks, and firewall rules language when Inventory supports it. Quote AliasNames and HostLabels only when present. 3. Spec name set: only names in SpecNames. Unnamed aliases stay NOT IN INPUTS. Never print CIDR or MAC VALUES not in Inventory. 4. Version lock: print Version. Refuse OPNsense features newer than Version if Version is named. 5. Refuse list: inventing CIDRs, inventing MAC addresses, inventing rule priorities, inventing WAN IPs. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Checklist from Inventory only. No invented CIDR VALUES. Teach OPNsense alias mapping, not a generic pfSense or iptables swap. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: alias Harbor Quay Cleat Servers as pasted host cue cleat-web as pasted network note LAN as pasted; alias River Ops Gate Cameras as pasted host cue gate-cam01 as pasted. CIDR NOT IN INPUTS. MAC invent NONE. Version: OPNsense 24.7 as pasted (do not invent unreleased AI firewall APIs) Workspace: Harbor Quay OPNsense Cluster as pasted SpecNames: Cleat Servers as pasted; Gate Cameras as pasted. Guest UNKNOWN. AliasNames: Cleat Servers as pasted; Gate Cameras as pasted. DMZ UNKNOWN. HostLabels: cleat-web as pasted; gate-cam01 as pasted. cleat-db UNKNOWN. NetworkNames: LAN as pasted. OPT1 UNKNOWN. Banned: guaranteed CIDR, mac invent, priority invent, wan invent Never: invent CIDRs, invent MAC addresses, invent rule priorities, invent WAN IPs Format: ledger + table + specs + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: alias Harbor Quay Cleat Servers host cue cleat-web network note LAN; alias River Ops Gate Cameras host cue gate-cam01. CIDR NOT IN INPUTS. MAC invent NONE. Version OPNsense 24.7. Workspace Harbor Quay OPNsense Cluster. SpecNames Cleat Servers; Gate Cameras; Guest UNKNOWN. AliasNames Cleat Servers; Gate Cameras; DMZ UNKNOWN. HostLabels cleat-web; gate-cam01; cleat-db UNKNOWN. NetworkNames LAN; OPT1 UNKNOWN. Lang English. Banner: not a live OPNsense API sync; not a penetration test report. Forbidden: invented CIDRs, MAC addresses, rule priorities, WAN IPs, guaranteed CIDR, mac invent, priority invent, wan invent. 2. Alias checklist. 1. Harbor Quay Cleat Servers | alias Cleat Servers as pasted (AliasNames) | host cleat-web as pasted (HostLabels) | network LAN as pasted (NetworkNames) | CIDR NOT IN INPUTS | MAC NONE | OPNsense alias checklist only. 2. River Ops Gate Cameras | alias Gate Cameras as pasted (AliasNames) | host gate-cam01 as pasted (HostLabels) | network note beyond LAN NOT IN INPUTS | CIDR NOT IN INPUTS | MAC NONE. cleat-db not printed beyond HostLabels. OPT1 not invented beyond NetworkNames. 3. Spec name set. Cleat Servers; Gate Cameras as SpecNames. Guest UNKNOWN so write Guest NOT IN INPUTS. No CIDR VALUES beyond Inventory. No third alias invented. 4. Version lock. OPNsense 24.7 as pasted. Unreleased AI firewall APIs not used. Plugin flags NOT IN INPUTS. 5. Refuse. CIDR invent: refused. MAC invent: refused. Priority invent: refused. WAN invent: refused. Guaranteed CIDR: refused. 6. Compliance. Banned hits none. Format ledger+table+specs+version+refuse+compliance. Gaps: Guest decision, DMZ AliasNames, cleat-db HostLabels, OPT1 NetworkNames, plugin path if any. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.