Skip to content

Web UI Areas

This reference maps major Web UI sections and what to validate in each.

Important filtering note

t1n1wall uses pf packet filtering. Historical ipfilter/ipf terminology from older documentation is not the operational model for current deployments.

System

Use for identity, time, admin access, and backup/restore.

Checks:

  • Correct hostname/timezone/NTP
  • Admin credentials and access restrictions
  • Verified backup export

Interfaces

Use for interface role, addressing, and link behavior.

Checks:

  • Correct WAN/LAN mapping
  • Correct gateway and DNS behavior
  • No subnet overlap

Firewall (pf policy)

Use for traffic policy and aliases.

Checks:

  • Rule order and interface scope are correct
  • Least-privilege policy maintained
  • Aliases are accurate and documented

NAT

Use for outbound translation and inbound forwarding.

Checks:

  • NAT targets are correct
  • Corresponding allow policy is present
  • External validation succeeds

VPN

Use for IPsec, L2TP/IPsec, and PPTP configuration.

Checks:

  • Mode-specific settings are complete (IPsec, L2TP/IPsec, PPTP)
  • Subnet, pool, and route correctness
  • Logs confirm negotiated and usable tunnels
  • Firewall rules for l2tp/pptp networks are present when needed

Services

Includes DHCP server, DNS forwarder, Dynamic DNS, SNMP, Proxy ARP, Captive Portal, and Wake on LAN.

Checks:

  • DHCP scope and options are correct
  • DNS path and resolution behavior are correct
  • If using DNS-to-policy mapping, DNS forwarder IP pool mappings are configured
  • Service logs are clean under test

Services reference

Service Location Reference
DHCP Server Services > DHCP Server DHCP Server
DNS Forwarder Services > DNS Forwarder DNS Forwarder, IP Pools, and pf Tables
Dynamic DNS Services > Dynamic DNS Dynamic DNS
SNMP Services > SNMP SNMP
Captive Portal Services > Captive Portal Captive Portal
Wake on LAN Services > Wake on LAN —
Proxy ARP Services > Proxy ARP NAT: Advanced Modes

DNS forwarder and IP pool mapping note

t1n1wall supports mapping selected FQDNs into IP Pools that are enforced as pf tables in firewall rules. See DNS Forwarder, IP Pools, and pf Tables.

Status and Diagnostics

Primary troubleshooting area.

Use for:

  • interface and gateway status
  • route visibility
  • firewall/log validation
  • ping/traceroute testing

Note: the firewall state page filename is historically named diag_ipfstat.php, but it reads pf state data.