Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Administers OPNsense firewalls through its REST API and SSH. Covers firewall rules, NAT, Suricata IDS/IPS, Unbound DNS, configuration backups, and service management. Targets OPNsense 26.1 and later.
Wraps both the OPNsense REST API and SSH service control in one skill, removing the need to navigate the web UI or write raw curl commands for routine administration tasks.
When to use it
- Scheduling nightly configuration backups with 30-day retention
- Blocking a suspicious IP range by adding a firewall alias and rule
- Switching Suricata from IDS detection mode to IPS blocking mode
- Restarting Unbound DNS after updating blocklist settings
- Pulling live firewall and interface statistics during a network incident
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Create a backup of the current OPNsense configuration
- 1Reads OPNSENSE_HOST, OPNSENSE_KEY, and OPNSENSE_SECRET from environment or credentials file
- 2Calls GET /api/core/backup/backup against the OPNsense API
- 3Saves the response to a timestamped file in the configured backup directory
- 4Verifies the file is non-empty and logs the backup path
Configuration backup saved to ./backups/opnsense-config-2026-03-19.xml
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.