config-trinity.linuxgeneration.org-20100817215608.xml

My config - Jon Bruce, 08/17/2010 09:59 pm

Download (37.9 kB)

 
1
<?xml version="1.0"?>
2
<pfsense>
3
        <version>6.4</version>
4
        <lastchange/>
5
        <theme>pfsense_ng</theme>
6
        <sysctl>
7
                <item>
8
                        <desc>Set the ephemeral port range to be lower.</desc>
9
                        <tunable>net.inet.ip.portrange.first</tunable>
10
                        <value>default</value>
11
                </item>
12
                <item>
13
                        <desc>Drop packets to closed TCP ports without returning a RST</desc>
14
                        <tunable>net.inet.tcp.blackhole</tunable>
15
                        <value>default</value>
16
                </item>
17
                <item>
18
                        <desc>Do not send ICMP port unreachable messages for closed UDP ports</desc>
19
                        <tunable>net.inet.udp.blackhole</tunable>
20
                        <value>default</value>
21
                </item>
22
                <item>
23
                        <desc>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</desc>
24
                        <tunable>net.inet.ip.random_id</tunable>
25
                        <value>default</value>
26
                </item>
27
                <item>
28
                        <desc>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</desc>
29
                        <tunable>net.inet.tcp.drop_synfin</tunable>
30
                        <value>default</value>
31
                </item>
32
                <item>
33
                        <desc>Enable sending IPv4 redirects</desc>
34
                        <tunable>net.inet.ip.redirect</tunable>
35
                        <value>default</value>
36
                </item>
37
                <item>
38
                        <desc>Enable sending IPv6 redirects</desc>
39
                        <tunable>net.inet6.ip6.redirect</tunable>
40
                        <value>default</value>
41
                </item>
42
                <item>
43
                        <desc>Generate SYN cookies for outbound SYN-ACK packets</desc>
44
                        <tunable>net.inet.tcp.syncookies</tunable>
45
                        <value>default</value>
46
                </item>
47
                <item>
48
                        <desc>Maximum incoming/outgoing TCP datagram size (receive)</desc>
49
                        <tunable>net.inet.tcp.recvspace</tunable>
50
                        <value>default</value>
51
                </item>
52
                <item>
53
                        <desc>Maximum incoming/outgoing TCP datagram size (send)</desc>
54
                        <tunable>net.inet.tcp.sendspace</tunable>
55
                        <value>default</value>
56
                </item>
57
                <item>
58
                        <desc>IP Fastforwarding</desc>
59
                        <tunable>net.inet.ip.fastforwarding</tunable>
60
                        <value>default</value>
61
                </item>
62
                <item>
63
                        <desc>Do not delay ACK to try and piggyback it onto a data packet</desc>
64
                        <tunable>net.inet.tcp.delayed_ack</tunable>
65
                        <value>default</value>
66
                </item>
67
                <item>
68
                        <desc>Maximum outgoing UDP datagram size</desc>
69
                        <tunable>net.inet.udp.maxdgram</tunable>
70
                        <value>default</value>
71
                </item>
72
                <item>
73
                        <desc>Handling of non-IP packets which are not passed to pfil (see if_bridge(4))</desc>
74
                        <tunable>net.link.bridge.pfil_onlyip</tunable>
75
                        <value>default</value>
76
                </item>
77
                <item>
78
                        <desc>Set to 0 to disable filtering on the incoming and outgoing member interfaces.</desc>
79
                        <tunable>net.link.bridge.pfil_member</tunable>
80
                        <value>default</value>
81
                </item>
82
                <item>
83
                        <desc>Set to 1 to enable filtering on the bridge interface</desc>
84
                        <tunable>net.link.bridge.pfil_bridge</tunable>
85
                        <value>default</value>
86
                </item>
87
                <item>
88
                        <desc>Allow unprivileged access to tap(4) device nodes</desc>
89
                        <tunable>net.link.tap.user_open</tunable>
90
                        <value>default</value>
91
                </item>
92
                <item>
93
                        <desc>Verbosity of the rndtest driver (0: do not display results on console)</desc>
94
                        <tunable>kern.rndtest.verbose</tunable>
95
                        <value>default</value>
96
                </item>
97
                <item>
98
                        <desc>Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())</desc>
99
                        <tunable>kern.randompid</tunable>
100
                        <value>default</value>
101
                </item>
102
                <item>
103
                        <desc>Maximum size of the IP input queue</desc>
104
                        <tunable>net.inet.ip.intr_queue_maxlen</tunable>
105
                        <value>default</value>
106
                </item>
107
                <item>
108
                        <desc>Disable CTRL+ALT+Delete reboot from keyboard.</desc>
109
                        <tunable>hw.syscons.kbd_reboot</tunable>
110
                        <value>default</value>
111
                </item>
112
                <item>
113
                        <desc>Enable TCP Inflight mode</desc>
114
                        <tunable>net.inet.tcp.inflight.enable</tunable>
115
                        <value>default</value>
116
                </item>
117
                <item>
118
                        <desc>Enable TCP extended debugging</desc>
119
                        <tunable>net.inet.tcp.log_debug</tunable>
120
                        <value>default</value>
121
                </item>
122
                <item>
123
                        <desc>Set ICMP Limits</desc>
124
                        <tunable>net.inet.icmp.icmplim</tunable>
125
                        <value>default</value>
126
                </item>
127
                <item>
128
                        <desc>TCP Offload Engine</desc>
129
                        <tunable>net.inet.tcp.tso</tunable>
130
                        <value>default</value>
131
                </item>
132
                <item>
133
                        <desc>TCP Offload Engine - BCE</desc>
134
                        <tunable>hw.bce.tso_enable</tunable>
135
                        <value>default</value>
136
                </item>
137
        </sysctl>
138
        <system>
139
                <optimization>normal</optimization>
140
                <hostname>trinity</hostname>
141
                <domain>linuxgeneration.org</domain>
142
                <dnsserver>xx.xx.96.96</dnsserver>
143
                <dnsserver>xx.xx.97.197</dnsserver>
144
                <group>
145
                        <name>all</name>
146
                        <description><![CDATA[All Users]]></description>
147
                        <scope>system</scope>
148
                        <gid>1998</gid>
149
                        <member>0</member>
150
                </group>
151
                <group>
152
                        <name>admins</name>
153
                        <description><![CDATA[System Administrators]]></description>
154
                        <scope>system</scope>
155
                        <gid>1999</gid>
156
                        <member>0</member>
157
                        <priv>page-all</priv>
158
                </group>
159
                <user>
160
                        <name>admin</name>
161
                        <fullname>System Administrator</fullname>
162
                        <scope>system</scope>
163
                        <groupname>admins</groupname>
164
                        <password>$1$npc9nbee$rkvFUu.ITQLY6IBSPI8Sn.</password>
165
                        <uid>0</uid>
166
                        <priv>user-shell-access</priv>
167
                        <md5-hash>7146e8eed5f124f82c356a009baa4358</md5-hash>
168
                        <nt-hash>912e596a04842da10f606f773db1cf9e</nt-hash>
169
                </user>
170
                <nextuid>2000</nextuid>
171
                <nextgid>2000</nextgid>
172
                <timezone>America/Toronto</timezone>
173
                <time-update-interval>300</time-update-interval>
174
                <timeservers>ca.pool.ntp.org</timeservers>
175
                <webgui>
176
                        <protocol>https</protocol>
177
                        <ssl-certref>4c67042d255a5</ssl-certref>
178
                        <port/>
179
                </webgui>
180
                <disablenatreflection>yes</disablenatreflection>
181
                <disablesegmentationoffloading/>
182
                <disablelargereceiveoffloading/>
183
                <cert>
184
                        <refid>4c67042d255a5</refid>
185
                        <name>webConfigurator default</name>
186
                        <crt>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</crt>
187
                        <prv>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</prv>
188
                </cert>
189
                <firmware>
190
                        <allowinvalidsig/>
191
                </firmware>
192
                <enablesshd>enabled</enablesshd>
193
                <ssh>
194
                        <port>70</port>
195
                </ssh>
196
        </system>
197
        <interfaces>
198
                <wan>
199
                        <enable/>
200
                        <if>xl0</if>
201
                        <ipaddr>xx.xx.96.62</ipaddr>
202
                        <subnet>26</subnet>
203
                        <gateway>xx.xx.96.1</gateway>
204
                        <blockpriv>on</blockpriv>
205
                        <blockbogons>on</blockbogons>
206
                        <media/>
207
                        <mediaopt/>
208
                </wan>
209
                <lan>
210
                        <enable/>
211
                        <if>xl2</if>
212
                        <ipaddr>192.168.174.1</ipaddr>
213
                        <subnet>24</subnet>
214
                        <media/>
215
                        <mediaopt/>
216
                </lan>
217
                <opt1>
218
                        <descr><![CDATA[Phone]]></descr>
219
                        <if>nfe0</if>
220
                        <spoofmac/>
221
                        <enable/>
222
                </opt1>
223
                <opt2>
224
                        <descr><![CDATA[WLAN]]></descr>
225
                        <if>ath0</if>
226
                        <wireless>
227
                                <standard>11g</standard>
228
                                <mode>hostap</mode>
229
                                <protmode>off</protmode>
230
                                <ssid>NOC4</ssid>
231
                                <channel>0</channel>
232
                                <authmode/>
233
                                <txpower>99</txpower>
234
                                <distance/>
235
                                <regdomain/>
236
                                <regcountry/>
237
                                <reglocation/>
238
                                <wpa>
239
                                        <macaddr_acl/>
240
                                        <auth_algs>1</auth_algs>
241
                                        <wpa_mode>2</wpa_mode>
242
                                        <wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
243
                                        <wpa_pairwise>CCMP</wpa_pairwise>
244
                                        <wpa_group_rekey>60</wpa_group_rekey>
245
                                        <wpa_gmk_rekey>3600</wpa_gmk_rekey>
246
                                        <passphrase>homewireless4</passphrase>
247
                                        <ext_wpa_sw/>
248
                                        <enable/>
249
                                </wpa>
250
                                <auth_server_addr/>
251
                                <auth_server_port/>
252
                                <auth_server_shared_secret/>
253
                                <wep/>
254
                        </wireless>
255
                        <spoofmac/>
256
                </opt2>
257
                <opt3>
258
                        <descr><![CDATA[WAN2]]></descr>
259
                        <if>xl1</if>
260
                        <ipaddr>dhcp</ipaddr>
261
                        <dhcphostname/>
262
                        <alias-address/>
263
                        <alias-subnet>32</alias-subnet>
264
                        <spoofmac/>
265
                </opt3>
266
                <opt4>
267
                        <descr><![CDATA[PhoneBridge]]></descr>
268
                        <if>bridge0</if>
269
                        <spoofmac/>
270
                        <enable/>
271
                </opt4>
272
                <opt5>
273
                        <descr><![CDATA[WLANBridge]]></descr>
274
                        <if>bridge1</if>
275
                        <spoofmac/>
276
                </opt5>
277
        </interfaces>
278
        <staticroutes/>
279
        <dhcpd>
280
                <lan>
281
                        <enable/>
282
                        <range>
283
                                <from>192.168.174.100</from>
284
                                <to>192.168.174.199</to>
285
                        </range>
286
                        <defaultleasetime/>
287
                        <maxleasetime/>
288
                        <netmask/>
289
                        <failover_peerip/>
290
                        <dnsserver>xx.xx.96.96</dnsserver>
291
                        <dnsserver>xx.xx.97.197</dnsserver>
292
                        <gateway/>
293
                        <domain/>
294
                        <domainsearchlist/>
295
                        <ddnsdomain/>
296
                        <ntpserver>xx.xx.96.96</ntpserver>
297
                        <ntpserver>xx.xx.96.70</ntpserver>
298
                        <tftp/>
299
                        <ldap/>
300
                        <next-server/>
301
                        <filename/>
302
                        <rootpath/>
303
                        <numberoptions/>
304
                </lan>
305
        </dhcpd>
306
        <pptpd>
307
                <mode/>
308
                <redir/>
309
                <localip/>
310
                <remoteip/>
311
        </pptpd>
312
        <ovpn/>
313
        <dnsmasq>
314
                <enable/>
315
        </dnsmasq>
316
        <snmpd>
317
                <syslocation/>
318
                <syscontact/>
319
                <rocommunity>public</rocommunity>
320
        </snmpd>
321
        <diag>
322
                <ipv6nat>
323
                        <ipaddr/>
324
                </ipv6nat>
325
        </diag>
326
        <bridge/>
327
        <syslog>
328
                <reverse/>
329
                <nentries>50</nentries>
330
        </syslog>
331
        <nat>
332
                <ipsecpassthru>
333
                        <enable/>
334
                </ipsecpassthru>
335
                <advancedoutbound/>
336
                <rule>
337
                        <source>
338
                                <any/>
339
                        </source>
340
                        <destination>
341
                                <network>wanip</network>
342
                                <port>22</port>
343
                        </destination>
344
                        <protocol>tcp</protocol>
345
                        <target>192.168.174.10</target>
346
                        <local-port>22</local-port>
347
                        <interface>wan</interface>
348
                        <descr><![CDATA[SSH to Keri]]></descr>
349
                        <associated-rule-id>nat_4c69c414c908c3.81582129</associated-rule-id>
350
                </rule>
351
                <rule>
352
                        <source>
353
                                <any/>
354
                        </source>
355
                        <destination>
356
                                <network>wanip</network>
357
                                <port>5000</port>
358
                        </destination>
359
                        <protocol>tcp</protocol>
360
                        <target>192.168.174.10</target>
361
                        <local-port>5000</local-port>
362
                        <interface>wan</interface>
363
                        <descr><![CDATA[Adrilanna]]></descr>
364
                        <associated-rule-id>nat_4c69c4360882c4.63103338</associated-rule-id>
365
                </rule>
366
                <rule>
367
                        <source>
368
                                <any/>
369
                        </source>
370
                        <destination>
371
                                <network>wanip</network>
372
                                <port>26484</port>
373
                        </destination>
374
                        <protocol>tcp/udp</protocol>
375
                        <target>192.168.174.10</target>
376
                        <local-port>26484</local-port>
377
                        <interface>wan</interface>
378
                        <descr><![CDATA[Torrent to Keri]]></descr>
379
                        <associated-rule-id>nat_4c69c476d0b174.53157377</associated-rule-id>
380
                </rule>
381
        </nat>
382
        <filter>
383
                <rule>
384
                        <id/>
385
                        <type>pass</type>
386
                        <interface>wan</interface>
387
                        <max/>
388
                        <max-src-nodes/>
389
                        <max-src-conn/>
390
                        <max-src-states/>
391
                        <statetimeout/>
392
                        <statetype>keep state</statetype>
393
                        <os/>
394
                        <source>
395
                                <address>xx.xx.96.82</address>
396
                        </source>
397
                        <destination>
398
                                <address>xx.xx.96.41</address>
399
                        </destination>
400
                        <descr><![CDATA[VoIP Phone]]></descr>
401
                </rule>
402
                <rule>
403
                        <source>
404
                                <any/>
405
                        </source>
406
                        <interface>wan</interface>
407
                        <protocol>tcp</protocol>
408
                        <destination>
409
                                <address>192.168.174.10</address>
410
                                <port>22</port>
411
                        </destination>
412
                        <descr><![CDATA[NAT SSH to Keri]]></descr>
413
                        <associated-rule-id>nat_4c69c414c908c3.81582129</associated-rule-id>
414
                </rule>
415
                <rule>
416
                        <source>
417
                                <any/>
418
                        </source>
419
                        <interface>wan</interface>
420
                        <protocol>tcp</protocol>
421
                        <destination>
422
                                <address>192.168.174.10</address>
423
                                <port>5000</port>
424
                        </destination>
425
                        <descr><![CDATA[NAT Adrilanna]]></descr>
426
                        <associated-rule-id>nat_4c69c4360882c4.63103338</associated-rule-id>
427
                </rule>
428
                <rule>
429
                        <source>
430
                                <any/>
431
                        </source>
432
                        <interface>wan</interface>
433
                        <protocol>tcp/udp</protocol>
434
                        <destination>
435
                                <address>192.168.174.10</address>
436
                                <port>26484</port>
437
                        </destination>
438
                        <descr><![CDATA[NAT Torrent to Keri]]></descr>
439
                        <associated-rule-id>nat_4c69c476d0b174.53157377</associated-rule-id>
440
                </rule>
441
                <rule>
442
                        <id/>
443
                        <type>pass</type>
444
                        <interface>opt1</interface>
445
                        <max/>
446
                        <max-src-nodes/>
447
                        <max-src-conn/>
448
                        <max-src-states/>
449
                        <statetimeout/>
450
                        <statetype>keep state</statetype>
451
                        <os/>
452
                        <source>
453
                                <address>xx.xx.96.41</address>
454
                        </source>
455
                        <destination>
456
                                <address>xx.xx.96.82</address>
457
                        </destination>
458
                        <descr><![CDATA[VoIP Phone]]></descr>
459
                </rule>
460
                <rule>
461
                        <id/>
462
                        <type>block</type>
463
                        <interface>lan</interface>
464
                        <max/>
465
                        <max-src-nodes/>
466
                        <max-src-conn/>
467
                        <max-src-states/>
468
                        <statetimeout/>
469
                        <statetype>keep state</statetype>
470
                        <os/>
471
                        <protocol>tcp/udp</protocol>
472
                        <source>
473
                                <any/>
474
                        </source>
475
                        <destination>
476
                                <any/>
477
                                <port>137-139</port>
478
                        </destination>
479
                        <descr><![CDATA[Drop NetBIOS]]></descr>
480
                </rule>
481
                <rule>
482
                        <id/>
483
                        <type>block</type>
484
                        <interface>lan</interface>
485
                        <max/>
486
                        <max-src-nodes/>
487
                        <max-src-conn/>
488
                        <max-src-states/>
489
                        <statetimeout/>
490
                        <statetype>keep state</statetype>
491
                        <os/>
492
                        <protocol>tcp/udp</protocol>
493
                        <source>
494
                                <any/>
495
                        </source>
496
                        <destination>
497
                                <any/>
498
                                <port>445</port>
499
                        </destination>
500
                        <descr><![CDATA[Drop MS DS]]></descr>
501
                </rule>
502
                <rule>
503
                        <type>pass</type>
504
                        <descr><![CDATA[Default allow LAN to any rule]]></descr>
505
                        <interface>lan</interface>
506
                        <source>
507
                                <network>lan</network>
508
                        </source>
509
                        <destination>
510
                                <any/>
511
                        </destination>
512
                </rule>
513
                <rule>
514
                        <descr><![CDATA[VOIP Adapter]]></descr>
515
                        <direction>out</direction>
516
                        <protocol>udp</protocol>
517
                        <defaultqueue>qVoIP</defaultqueue>
518
                        <source>
519
                                <address>xx.xx.96.41</address>
520
                        </source>
521
                        <destination>
522
                                <any/>
523
                        </destination>
524
                        <floating>yes</floating>
525
                        <wizard>yes</wizard>
526
                        <enabled>on</enabled>
527
                </rule>
528
                <rule>
529
                        <defaultqueue>qP2P</defaultqueue>
530
                        <direction>out</direction>
531
                        <source>
532
                                <any/>
533
                        </source>
534
                        <destination>
535
                                <any/>
536
                                <port>7668-7668</port>
537
                        </destination>
538
                        <descr><![CDATA[m_P2P Aimster outbound]]></descr>
539
                        <floating>yes</floating>
540
                        <wizard>yes</wizard>
541
                        <protocol>tcp</protocol>
542
                </rule>
543
                <rule>
544
                        <defaultqueue>qP2P</defaultqueue>
545
                        <direction>out</direction>
546
                        <source>
547
                                <any/>
548
                        </source>
549
                        <destination>
550
                                <any/>
551
                                <port>6881-6999</port>
552
                        </destination>
553
                        <descr><![CDATA[m_P2P BitTorrent outbound]]></descr>
554
                        <floating>yes</floating>
555
                        <wizard>yes</wizard>
556
                        <protocol>tcp</protocol>
557
                </rule>
558
                <rule>
559
                        <defaultqueue>qP2P</defaultqueue>
560
                        <direction>out</direction>
561
                        <source>
562
                                <any/>
563
                        </source>
564
                        <destination>
565
                                <any/>
566
                                <port>6881-6999</port>
567
                        </destination>
568
                        <descr><![CDATA[m_P2P BitTorrent outbound]]></descr>
569
                        <floating>yes</floating>
570
                        <wizard>yes</wizard>
571
                        <protocol>udp</protocol>
572
                </rule>
573
                <rule>
574
                        <defaultqueue>qP2P</defaultqueue>
575
                        <direction>out</direction>
576
                        <source>
577
                                <any/>
578
                        </source>
579
                        <destination>
580
                                <any/>
581
                                <port>7788-7788</port>
582
                        </destination>
583
                        <descr><![CDATA[m_P2P BuddyShare outbound]]></descr>
584
                        <floating>yes</floating>
585
                        <wizard>yes</wizard>
586
                        <protocol>tcp</protocol>
587
                </rule>
588
                <rule>
589
                        <defaultqueue>qP2P</defaultqueue>
590
                        <direction>out</direction>
591
                        <source>
592
                                <any/>
593
                        </source>
594
                        <destination>
595
                                <any/>
596
                                <port>2340-2340</port>
597
                        </destination>
598
                        <descr><![CDATA[m_P2P CuteMX outbound]]></descr>
599
                        <floating>yes</floating>
600
                        <wizard>yes</wizard>
601
                        <protocol>tcp</protocol>
602
                </rule>
603
                <rule>
604
                        <defaultqueue>qP2P</defaultqueue>
605
                        <direction>out</direction>
606
                        <source>
607
                                <any/>
608
                        </source>
609
                        <destination>
610
                                <any/>
611
                                <port>6666-6668</port>
612
                        </destination>
613
                        <descr><![CDATA[m_P2P dcc outbound]]></descr>
614
                        <floating>yes</floating>
615
                        <wizard>yes</wizard>
616
                        <protocol>tcp</protocol>
617
                </rule>
618
                <rule>
619
                        <defaultqueue>qP2P</defaultqueue>
620
                        <direction>out</direction>
621
                        <source>
622
                                <any/>
623
                        </source>
624
                        <destination>
625
                                <any/>
626
                                <port>412-412</port>
627
                        </destination>
628
                        <descr><![CDATA[m_P2P DirectConnect outbound]]></descr>
629
                        <floating>yes</floating>
630
                        <wizard>yes</wizard>
631
                        <protocol>tcp</protocol>
632
                </rule>
633
                <rule>
634
                        <defaultqueue>qP2P</defaultqueue>
635
                        <direction>out</direction>
636
                        <source>
637
                                <any/>
638
                        </source>
639
                        <destination>
640
                                <any/>
641
                                <port>1044-1045</port>
642
                        </destination>
643
                        <descr><![CDATA[m_P2P DirectFileExpress outbound]]></descr>
644
                        <floating>yes</floating>
645
                        <wizard>yes</wizard>
646
                        <protocol>tcp</protocol>
647
                </rule>
648
                <rule>
649
                        <defaultqueue>qP2P</defaultqueue>
650
                        <direction>out</direction>
651
                        <source>
652
                                <any/>
653
                        </source>
654
                        <destination>
655
                                <any/>
656
                                <port>4661-4665</port>
657
                        </destination>
658
                        <descr><![CDATA[m_P2P EDonkey2000 outbound]]></descr>
659
                        <floating>yes</floating>
660
                        <wizard>yes</wizard>
661
                        <protocol>tcp</protocol>
662
                </rule>
663
                <rule>
664
                        <defaultqueue>qP2P</defaultqueue>
665
                        <direction>out</direction>
666
                        <source>
667
                                <any/>
668
                        </source>
669
                        <destination>
670
                                <any/>
671
                                <port>6346-6346</port>
672
                        </destination>
673
                        <descr><![CDATA[m_P2P Gnutella-TCP outbound]]></descr>
674
                        <floating>yes</floating>
675
                        <wizard>yes</wizard>
676
                        <protocol>tcp</protocol>
677
                </rule>
678
                <rule>
679
                        <defaultqueue>qP2P</defaultqueue>
680
                        <direction>out</direction>
681
                        <source>
682
                                <any/>
683
                        </source>
684
                        <destination>
685
                                <any/>
686
                                <port>6346-6346</port>
687
                        </destination>
688
                        <descr><![CDATA[m_P2P Gnutella-UDP outbound]]></descr>
689
                        <floating>yes</floating>
690
                        <wizard>yes</wizard>
691
                        <protocol>udp</protocol>
692
                </rule>
693
                <rule>
694
                        <defaultqueue>qP2P</defaultqueue>
695
                        <direction>out</direction>
696
                        <source>
697
                                <any/>
698
                        </source>
699
                        <destination>
700
                                <any/>
701
                                <port>8038-8039</port>
702
                        </destination>
703
                        <descr><![CDATA[m_P2P grouper outbound]]></descr>
704
                        <floating>yes</floating>
705
                        <wizard>yes</wizard>
706
                        <protocol>tcp</protocol>
707
                </rule>
708
                <rule>
709
                        <defaultqueue>qP2P</defaultqueue>
710
                        <direction>out</direction>
711
                        <source>
712
                                <any/>
713
                        </source>
714
                        <destination>
715
                                <any/>
716
                                <port>28864-28865</port>
717
                        </destination>
718
                        <descr><![CDATA[m_P2P hotComm outbound]]></descr>
719
                        <floating>yes</floating>
720
                        <wizard>yes</wizard>
721
                        <protocol>tcp</protocol>
722
                </rule>
723
                <rule>
724
                        <defaultqueue>qP2P</defaultqueue>
725
                        <direction>out</direction>
726
                        <source>
727
                                <any/>
728
                        </source>
729
                        <destination>
730
                                <any/>
731
                                <port>5500-5503</port>
732
                        </destination>
733
                        <descr><![CDATA[m_P2P HotlineConnect outbound]]></descr>
734
                        <floating>yes</floating>
735
                        <wizard>yes</wizard>
736
                        <protocol>tcp</protocol>
737
                </rule>
738
                <rule>
739
                        <defaultqueue>qP2P</defaultqueue>
740
                        <direction>out</direction>
741
                        <source>
742
                                <any/>
743
                        </source>
744
                        <destination>
745
                                <any/>
746
                                <port>4329-4329</port>
747
                        </destination>
748
                        <descr><![CDATA[m_P2P iMesh outbound]]></descr>
749
                        <floating>yes</floating>
750
                        <wizard>yes</wizard>
751
                        <protocol>tcp</protocol>
752
                </rule>
753
                <rule>
754
                        <defaultqueue>qP2P</defaultqueue>
755
                        <direction>out</direction>
756
                        <source>
757
                                <any/>
758
                        </source>
759
                        <destination>
760
                                <any/>
761
                                <port>6699-6701</port>
762
                        </destination>
763
                        <descr><![CDATA[m_P2P Napster outbound]]></descr>
764
                        <floating>yes</floating>
765
                        <wizard>yes</wizard>
766
                        <protocol>tcp</protocol>
767
                </rule>
768
                <rule>
769
                        <defaultqueue>qP2P</defaultqueue>
770
                        <direction>out</direction>
771
                        <source>
772
                                <any/>
773
                        </source>
774
                        <destination>
775
                                <any/>
776
                                <port>8888-8889</port>
777
                        </destination>
778
                        <descr><![CDATA[m_P2P OpenNap outbound]]></descr>
779
                        <floating>yes</floating>
780
                        <wizard>yes</wizard>
781
                        <protocol>tcp</protocol>
782
                </rule>
783
                <rule>
784
                        <defaultqueue>qP2P</defaultqueue>
785
                        <direction>out</direction>
786
                        <source>
787
                                <any/>
788
                        </source>
789
                        <destination>
790
                                <any/>
791
                                <port>8311-8311</port>
792
                        </destination>
793
                        <descr><![CDATA[m_P2P Scour outbound]]></descr>
794
                        <floating>yes</floating>
795
                        <wizard>yes</wizard>
796
                        <protocol>tcp</protocol>
797
                </rule>
798
                <rule>
799
                        <defaultqueue>qP2P</defaultqueue>
800
                        <direction>out</direction>
801
                        <source>
802
                                <any/>
803
                        </source>
804
                        <destination>
805
                                <any/>
806
                                <port>6346-6346</port>
807
                        </destination>
808
                        <descr><![CDATA[m_P2P Shareaza outbound]]></descr>
809
                        <floating>yes</floating>
810
                        <wizard>yes</wizard>
811
                        <protocol>tcp</protocol>
812
                </rule>
813
                <rule>
814
                        <defaultqueue>qP2P</defaultqueue>
815
                        <direction>out</direction>
816
                        <source>
817
                                <any/>
818
                        </source>
819
                        <destination>
820
                                <any/>
821
                                <port>5190-5190</port>
822
                        </destination>
823
                        <descr><![CDATA[m_P2P SongSpy outbound]]></descr>
824
                        <floating>yes</floating>
825
                        <wizard>yes</wizard>
826
                        <protocol>tcp</protocol>
827
                </rule>
828
                <rule>
829
                        <defaultqueue>qP2P</defaultqueue>
830
                        <direction>out</direction>
831
                        <source>
832
                                <any/>
833
                        </source>
834
                        <destination>
835
                                <any/>
836
                                <port>6699-6699</port>
837
                        </destination>
838
                        <descr><![CDATA[m_P2P WinMX outbound]]></descr>
839
                        <floating>yes</floating>
840
                        <wizard>yes</wizard>
841
                        <protocol>tcp</protocol>
842
                </rule>
843
                <rule>
844
                        <defaultqueue>qGames</defaultqueue>
845
                        <direction>out</direction>
846
                        <source>
847
                                <any/>
848
                        </source>
849
                        <destination>
850
                                <any/>
851
                                <port>27910-27919</port>
852
                        </destination>
853
                        <floating>yes</floating>
854
                        <wizard>yes</wizard>
855
                        <enabled>on</enabled>
856
                        <descr><![CDATA[m_Game quakeiii outbound]]></descr>
857
                        <protocol>udp</protocol>
858
                </rule>
859
                <rule>
860
                        <defaultqueue>qOthersHigh</defaultqueue>
861
                        <ackqueue>qACK</ackqueue>
862
                        <direction>out</direction>
863
                        <source>
864
                                <any/>
865
                        </source>
866
                        <destination>
867
                                <any/>
868
                                <port>3389-3389</port>
869
                        </destination>
870
                        <floating>yes</floating>
871
                        <wizard>yes</wizard>
872
                        <enabled>on</enabled>
873
                        <descr><![CDATA[m_Other MSRDP outbound]]></descr>
874
                        <protocol>tcp</protocol>
875
                </rule>
876
                <rule>
877
                        <defaultqueue>qOthersHigh</defaultqueue>
878
                        <ackqueue>qACK</ackqueue>
879
                        <direction>out</direction>
880
                        <source>
881
                                <any/>
882
                        </source>
883
                        <destination>
884
                                <any/>
885
                                <port>6667-6670</port>
886
                        </destination>
887
                        <floating>yes</floating>
888
                        <wizard>yes</wizard>
889
                        <enabled>on</enabled>
890
                        <descr><![CDATA[m_Other IRC outbound]]></descr>
891
                        <protocol>tcp</protocol>
892
                </rule>
893
                <rule>
894
                        <defaultqueue>qOthersHigh</defaultqueue>
895
                        <ackqueue>qACK</ackqueue>
896
                        <direction>out</direction>
897
                        <source>
898
                                <any/>
899
                        </source>
900
                        <destination>
901
                                <any/>
902
                                <port>8000-8100</port>
903
                        </destination>
904
                        <floating>yes</floating>
905
                        <wizard>yes</wizard>
906
                        <enabled>on</enabled>
907
                        <descr><![CDATA[m_Other STREAMINGMP3 outbound]]></descr>
908
                        <protocol>tcp</protocol>
909
                </rule>
910
                <rule>
911
                        <defaultqueue>qOthersHigh</defaultqueue>
912
                        <ackqueue>qACK</ackqueue>
913
                        <direction>out</direction>
914
                        <source>
915
                                <any/>
916
                        </source>
917
                        <destination>
918
                                <any/>
919
                                <port>554-554</port>
920
                        </destination>
921
                        <floating>yes</floating>
922
                        <wizard>yes</wizard>
923
                        <enabled>on</enabled>
924
                        <descr><![CDATA[m_Other RTSP1 outbound]]></descr>
925
                        <protocol>tcp</protocol>
926
                </rule>
927
                <rule>
928
                        <defaultqueue>qOthersHigh</defaultqueue>
929
                        <ackqueue>qACK</ackqueue>
930
                        <direction>out</direction>
931
                        <source>
932
                                <any/>
933
                        </source>
934
                        <destination>
935
                                <any/>
936
                                <port>80-80</port>
937
                        </destination>
938
                        <floating>yes</floating>
939
                        <wizard>yes</wizard>
940
                        <enabled>on</enabled>
941
                        <descr><![CDATA[m_Other HTTP outbound]]></descr>
942
                        <protocol>tcp</protocol>
943
                </rule>
944
                <rule>
945
                        <defaultqueue>qOthersHigh</defaultqueue>
946
                        <ackqueue>qACK</ackqueue>
947
                        <direction>out</direction>
948
                        <source>
949
                                <any/>
950
                        </source>
951
                        <destination>
952
                                <any/>
953
                                <port>443-443</port>
954
                        </destination>
955
                        <floating>yes</floating>
956
                        <wizard>yes</wizard>
957
                        <enabled>on</enabled>
958
                        <descr><![CDATA[m_Other HTTPS outbound]]></descr>
959
                        <protocol>tcp</protocol>
960
                </rule>
961
                <rule>
962
                        <defaultqueue>qOthersHigh</defaultqueue>
963
                        <ackqueue>qACK</ackqueue>
964
                        <direction>out</direction>
965
                        <source>
966
                                <any/>
967
                        </source>
968
                        <destination>
969
                                <any/>
970
                                <port>25-25</port>
971
                        </destination>
972
                        <floating>yes</floating>
973
                        <wizard>yes</wizard>
974
                        <enabled>on</enabled>
975
                        <descr><![CDATA[m_Other SMTP outbound]]></descr>
976
                        <protocol>tcp</protocol>
977
                </rule>
978
                <rule>
979
                        <defaultqueue>qOthersHigh</defaultqueue>
980
                        <ackqueue>qACK</ackqueue>
981
                        <direction>out</direction>
982
                        <source>
983
                                <any/>
984
                        </source>
985
                        <destination>
986
                                <any/>
987
                                <port>143-143</port>
988
                        </destination>
989
                        <floating>yes</floating>
990
                        <wizard>yes</wizard>
991
                        <enabled>on</enabled>
992
                        <descr><![CDATA[m_Other IMAP outbound]]></descr>
993
                        <protocol>tcp</protocol>
994
                </rule>
995
                <rule>
996
                        <defaultqueue>qOthersHigh</defaultqueue>
997
                        <ackqueue>qACK</ackqueue>
998
                        <direction>out</direction>
999
                        <source>
1000
                                <any/>
1001
                        </source>
1002
                        <destination>
1003
                                <any/>
1004
                                <port>53-53</port>
1005
                        </destination>
1006
                        <floating>yes</floating>
1007
                        <wizard>yes</wizard>
1008
                        <enabled>on</enabled>
1009
                        <descr><![CDATA[m_Other DNS1 outbound]]></descr>
1010
                        <protocol>tcp</protocol>
1011
                </rule>
1012
                <rule>
1013
                        <defaultqueue>qOthersHigh</defaultqueue>
1014
                        <direction>out</direction>
1015
                        <source>
1016
                                <any/>
1017
                        </source>
1018
                        <destination>
1019
                                <any/>
1020
                                <port>53-53</port>
1021
                        </destination>
1022
                        <floating>yes</floating>
1023
                        <wizard>yes</wizard>
1024
                        <enabled>on</enabled>
1025
                        <descr><![CDATA[m_Other DNS2 outbound]]></descr>
1026
                        <protocol>udp</protocol>
1027
                </rule>
1028
        </filter>
1029
        <shaper>
1030
                <queue>
1031
                        <interface>wan</interface>
1032
                        <name>wan</name>
1033
                        <scheduler>HFSC</scheduler>
1034
                        <bandwidth>3500</bandwidth>
1035
                        <bandwidthtype>Kb</bandwidthtype>
1036
                        <enabled>on</enabled>
1037
                        <queue>
1038
                                <name>qACK</name>
1039
                                <interface>wan</interface>
1040
                                <priority>6</priority>
1041
                                <bandwidth>19.818</bandwidth>
1042
                                <bandwidthtype>%</bandwidthtype>
1043
                                <enabled>on</enabled>
1044
                                <ecn>on</ecn>
1045
                                <linkshare1>0b</linkshare1>
1046
                                <linkshare2>100</linkshare2>
1047
                                <linkshare>on</linkshare>
1048
                                <linkshare3>19.818%</linkshare3>
1049
                        </queue>
1050
                        <queue>
1051
                                <name>qDefault</name>
1052
                                <interface>wan</interface>
1053
                                <priority>3</priority>
1054
                                <bandwidth>9.909</bandwidth>
1055
                                <bandwidthtype>%</bandwidthtype>
1056
                                <enabled>on</enabled>
1057
                                <default>on</default>
1058
                                <ecn>on</ecn>
1059
                        </queue>
1060
                        <queue>
1061
                                <name>qP2P</name>
1062
                                <interface>wan</interface>
1063
                                <priority>1</priority>
1064
                                <bandwidth>4.9545</bandwidth>
1065
                                <bandwidthtype>%</bandwidthtype>
1066
                                <enabled>on</enabled>
1067
                                <ecn>on</ecn>
1068
                                <linkshare1>4.9545%</linkshare1>
1069
                                <linkshare2>300</linkshare2>
1070
                                <linkshare>on</linkshare>
1071
                                <linkshare3>4.9545%</linkshare3>
1072
                                <upperlimit3>4.9545%</upperlimit3>
1073
                                <upperlimit>on</upperlimit>
1074
                        </queue>
1075
                        <queue>
1076
                                <name>qVoIP</name>
1077
                                <interface>wan</interface>
1078
                                <priority>7</priority>
1079
                                <bandwidth>32</bandwidth>
1080
                                <bandwidthtype>Kb</bandwidthtype>
1081
                                <enabled>on</enabled>
1082
                                <ecn>on</ecn>
1083
                                <realtime1>0b</realtime1>
1084
                                <realtime2>10</realtime2>
1085
                                <realtime>on</realtime>
1086
                                <realtime3>92Kb</realtime3>
1087
                        </queue>
1088
                        <queue>
1089
                                <name>qGames</name>
1090
                                <interface>wan</interface>
1091
                                <priority>5</priority>
1092
                                <bandwidth>19.818</bandwidth>
1093
                                <bandwidthtype>%</bandwidthtype>
1094
                                <enabled>on</enabled>
1095
                                <ecn>on</ecn>
1096
                                <linkshare1>0b</linkshare1>
1097
                                <linkshare2>50</linkshare2>
1098
                                <linkshare>on</linkshare>
1099
                                <linkshare3>19.818%</linkshare3>
1100
                        </queue>
1101
                        <queue>
1102
                                <name>qOthersHigh</name>
1103
                                <interface>wan</interface>
1104
                                <priority>4</priority>
1105
                                <bandwidth>9.909</bandwidth>
1106
                                <bandwidthtype>%</bandwidthtype>
1107
                                <enabled>on</enabled>
1108
                                <ecn>on</ecn>
1109
                                <linkshare1>0b</linkshare1>
1110
                                <linkshare2>200</linkshare2>
1111
                                <linkshare>on</linkshare>
1112
                                <linkshare3>9.909%</linkshare3>
1113
                        </queue>
1114
                        <queue>
1115
                                <name>qOthersLow</name>
1116
                                <interface>wan</interface>
1117
                                <priority>2</priority>
1118
                                <bandwidth>4.9545</bandwidth>
1119
                                <bandwidthtype>%</bandwidthtype>
1120
                                <enabled>on</enabled>
1121
                                <ecn>on</ecn>
1122
                                <linkshare1>4.9545%</linkshare1>
1123
                                <linkshare2>500</linkshare2>
1124
                                <linkshare>on</linkshare>
1125
                                <linkshare3>4.9545%</linkshare3>
1126
                        </queue>
1127
                </queue>
1128
                <queue>
1129
                        <interface>lan</interface>
1130
                        <name>lan</name>
1131
                        <scheduler>HFSC</scheduler>
1132
                        <bandwidth>3000</bandwidth>
1133
                        <bandwidthtype>Kb</bandwidthtype>
1134
                        <enabled>on</enabled>
1135
                        <queue>
1136
                                <name>qInternet</name>
1137
                                <interface>lan</interface>
1138
                                <bandwidth>3000</bandwidth>
1139
                                <bandwidthtype>Kb</bandwidthtype>
1140
                                <enabled>on</enabled>
1141
                                <ecn>on</ecn>
1142
                                <linkshare1>3000Kb</linkshare1>
1143
                                <linkshare2>100</linkshare2>
1144
                                <linkshare>on</linkshare>
1145
                                <linkshare3>3000Kb</linkshare3>
1146
                                <upperlimit3>3000Kb</upperlimit3>
1147
                                <upperlimit>on</upperlimit>
1148
                                <queue>
1149
                                        <name>qACK</name>
1150
                                        <interface>lan</interface>
1151
                                        <priority>6</priority>
1152
                                        <bandwidth>19.786</bandwidth>
1153
                                        <bandwidthtype>%</bandwidthtype>
1154
                                        <enabled>on</enabled>
1155
                                        <ecn>on</ecn>
1156
                                        <linkshare1>0b</linkshare1>
1157
                                        <linkshare2>100</linkshare2>
1158
                                        <linkshare>on</linkshare>
1159
                                        <linkshare3>19.786%</linkshare3>
1160
                                </queue>
1161
                                <queue>
1162
                                        <name>qDefault</name>
1163
                                        <interface>lan</interface>
1164
                                        <priority>3</priority>
1165
                                        <bandwidth>9.893</bandwidth>
1166
                                        <bandwidthtype>%</bandwidthtype>
1167
                                        <enabled>on</enabled>
1168
                                        <default>on</default>
1169
                                        <ecn>on</ecn>
1170
                                </queue>
1171
                                <queue>
1172
                                        <name>qP2P</name>
1173
                                        <interface>lan</interface>
1174
                                        <priority>1</priority>
1175
                                        <bandwidth>4.9465</bandwidth>
1176
                                        <bandwidthtype>%</bandwidthtype>
1177
                                        <enabled>on</enabled>
1178
                                        <ecn>on</ecn>
1179
                                        <linkshare1>4.9465%</linkshare1>
1180
                                        <linkshare2>300</linkshare2>
1181
                                        <linkshare>on</linkshare>
1182
                                        <linkshare3>4.9465%</linkshare3>
1183
                                        <upperlimit3>4.9465%</upperlimit3>
1184
                                        <upperlimit>on</upperlimit>
1185
                                </queue>
1186
                                <queue>
1187
                                        <name>qVoIP</name>
1188
                                        <interface>lan</interface>
1189
                                        <priority>7</priority>
1190
                                        <bandwidth>32</bandwidth>
1191
                                        <bandwidthtype>Kb</bandwidthtype>
1192
                                        <enabled>on</enabled>
1193
                                        <ecn>on</ecn>
1194
                                        <realtime1>0b</realtime1>
1195
                                        <realtime2>10</realtime2>
1196
                                        <realtime>on</realtime>
1197
                                        <realtime3>92Kb</realtime3>
1198
                                </queue>
1199
                                <queue>
1200
                                        <name>qGames</name>
1201
                                        <interface>lan</interface>
1202
                                        <priority>5</priority>
1203
                                        <bandwidth>19.786</bandwidth>
1204
                                        <bandwidthtype>%</bandwidthtype>
1205
                                        <enabled>on</enabled>
1206
                                        <ecn>on</ecn>
1207
                                        <linkshare1>0b</linkshare1>
1208
                                        <linkshare2>50</linkshare2>
1209
                                        <linkshare>on</linkshare>
1210
                                        <linkshare3>19.786%</linkshare3>
1211
                                </queue>
1212
                                <queue>
1213
                                        <name>qOthersHigh</name>
1214
                                        <interface>lan</interface>
1215
                                        <priority>4</priority>
1216
                                        <bandwidth>9.893</bandwidth>
1217
                                        <bandwidthtype>%</bandwidthtype>
1218
                                        <enabled>on</enabled>
1219
                                        <ecn>on</ecn>
1220
                                        <linkshare1>0b</linkshare1>
1221
                                        <linkshare2>200</linkshare2>
1222
                                        <linkshare>on</linkshare>
1223
                                        <linkshare3>9.893%</linkshare3>
1224
                                </queue>
1225
                                <queue>
1226
                                        <name>qOthersLow</name>
1227
                                        <interface>lan</interface>
1228
                                        <priority>2</priority>
1229
                                        <bandwidth>4.9465</bandwidth>
1230
                                        <bandwidthtype>%</bandwidthtype>
1231
                                        <enabled>on</enabled>
1232
                                        <ecn>on</ecn>
1233
                                        <linkshare1>4.9465%</linkshare1>
1234
                                        <linkshare2>500</linkshare2>
1235
                                        <linkshare>on</linkshare>
1236
                                        <linkshare3>4.9465%</linkshare3>
1237
                                </queue>
1238
                        </queue>
1239
                </queue>
1240
        </shaper>
1241
        <ipsec>
1242
                <preferoldsa/>
1243
        </ipsec>
1244
        <aliases/>
1245
        <proxyarp/>
1246
        <cron>
1247
                <item>
1248
                        <minute>0</minute>
1249
                        <hour>*</hour>
1250
                        <mday>*</mday>
1251
                        <month>*</month>
1252
                        <wday>*</wday>
1253
                        <who>root</who>
1254
                        <command>/usr/bin/nice -n20 newsyslog</command>
1255
                </item>
1256
                <item>
1257
                        <minute>1,31</minute>
1258
                        <hour>0-5</hour>
1259
                        <mday>*</mday>
1260
                        <month>*</month>
1261
                        <wday>*</wday>
1262
                        <who>root</who>
1263
                        <command>/usr/bin/nice -n20 adjkerntz -a</command>
1264
                </item>
1265
                <item>
1266
                        <minute>1</minute>
1267
                        <hour>3</hour>
1268
                        <mday>1</mday>
1269
                        <month>*</month>
1270
                        <wday>*</wday>
1271
                        <who>root</who>
1272
                        <command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
1273
                </item>
1274
                <item>
1275
                        <minute>*/60</minute>
1276
                        <hour>*</hour>
1277
                        <mday>*</mday>
1278
                        <month>*</month>
1279
                        <wday>*</wday>
1280
                        <who>root</who>
1281
                        <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
1282
                </item>
1283
                <item>
1284
                        <minute>1</minute>
1285
                        <hour>1</hour>
1286
                        <mday>*</mday>
1287
                        <month>*</month>
1288
                        <wday>*</wday>
1289
                        <who>root</who>
1290
                        <command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
1291
                </item>
1292
                <item>
1293
                        <minute>*/60</minute>
1294
                        <hour>*</hour>
1295
                        <mday>*</mday>
1296
                        <month>*</month>
1297
                        <wday>*</wday>
1298
                        <who>root</who>
1299
                        <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
1300
                </item>
1301
                <item>
1302
                        <minute>*/5</minute>
1303
                        <hour>*</hour>
1304
                        <mday>*</mday>
1305
                        <month>*</month>
1306
                        <wday>*</wday>
1307
                        <who>root</who>
1308
                        <command>/usr/bin/nice -n20 /usr/local/bin/checkreload.sh</command>
1309
                </item>
1310
        </cron>
1311
        <wol/>
1312
        <rrd>
1313
                <enable/>
1314
        </rrd>
1315
        <load_balancer>
1316
                <monitor_type>
1317
                        <name>ICMP</name>
1318
                        <type>icmp</type>
1319
                        <desc>ICMP</desc>
1320
                        <options/>
1321
                </monitor_type>
1322
                <monitor_type>
1323
                        <name>TCP</name>
1324
                        <type>tcp</type>
1325
                        <desc>Generic TCP</desc>
1326
                        <options/>
1327
                </monitor_type>
1328
                <monitor_type>
1329
                        <name>HTTP</name>
1330
                        <type>http</type>
1331
                        <desc>Generic HTTP</desc>
1332
                        <options>
1333
                                <path>/</path>
1334
                                <host/>
1335
                                <code>200</code>
1336
                        </options>
1337
                </monitor_type>
1338
                <monitor_type>
1339
                        <name>HTTPS</name>
1340
                        <type>https</type>
1341
                        <desc>Generic HTTPS</desc>
1342
                        <options>
1343
                                <path>/</path>
1344
                                <host/>
1345
                                <code>200</code>
1346
                        </options>
1347
                </monitor_type>
1348
                <monitor_type>
1349
                        <name>SMTP</name>
1350
                        <type>send</type>
1351
                        <desc>Generic SMTP</desc>
1352
                        <options>
1353
                                <send>EHLO nosuchhost</send>
1354
                                <expect>250-</expect>
1355
                        </options>
1356
                </monitor_type>
1357
        </load_balancer>
1358
        <widgets>
1359
                <sequence>system_information-container:col1:show,captive_portal_status-container:col1:close,carp_status-container:col1:close,cpu_graphs-container:col1:close,gmirror_status-container:col1:close,installed_packages-container:col1:close,interface_statistics-container:col1:close,gateways-container:col2:show,interfaces-container:col2:show,ipsec-container:col2:close,load_balancer_status-container:col2:close,log-container:col2:close,picture-container:col2:close,rss-container:col2:close,services_status-container:col2:close,traffic_graphs-container:col2:close,openvpn-container:col2:none</sequence>
1360
        </widgets>
1361
        <revision>
1362
                <time>1282008754</time>
1363
                <description><![CDATA[admin: Interface WLANBridge(opt5) is now disabled.]]></description>
1364
                <username>admin</username>
1365
        </revision>
1366
        <ppps>
1367
        </ppps>
1368
        <l7shaper>
1369
                <container/>
1370
        </l7shaper>
1371
        <dnshaper/>
1372
        <gateways>
1373
        </gateways>
1374
        <openvpn/>
1375
        <bridges>
1376
                <bridged>
1377
                        <members>wan,opt1</members>
1378
                        <descr/>
1379
                        <maxaddr/>
1380
                        <timeout/>
1381
                        <maxage/>
1382
                        <fwdelay/>
1383
                        <hellotime/>
1384
                        <priority/>
1385
                        <proto>rstp</proto>
1386
                        <holdcount/>
1387
                        <ifpriority/>
1388
                        <ifpathcost/>
1389
                        <bridgeif>bridge0</bridgeif>
1390
                </bridged>
1391
                <bridged>
1392
                        <members>lan,opt2</members>
1393
                        <descr/>
1394
                        <maxaddr/>
1395
                        <timeout/>
1396
                        <maxage/>
1397
                        <fwdelay/>
1398
                        <hellotime/>
1399
                        <priority/>
1400
                        <proto>rstp</proto>
1401
                        <holdcount/>
1402
                        <ifpriority/>
1403
                        <ifpathcost/>
1404
                        <bridgeif>bridge1</bridgeif>
1405
                </bridged>
1406
        </bridges>
1407
        <wireless/>
1408
        <ezshaper>
1409
                <step1>
1410
                        <numberofconnections>1</numberofconnections>
1411
                </step1>
1412
                <step2>
1413
                        <downloadscheduler>HFSC</downloadscheduler>
1414
                        <conn0uploadscheduler>HFSC</conn0uploadscheduler>
1415
                        <conn0upload>3500</conn0upload>
1416
                        <conn0uploadspeed>Kb</conn0uploadspeed>
1417
                        <conn0download>3000</conn0download>
1418
                        <conn0downloadspeed>Kb</conn0downloadspeed>
1419
                        <conn0interface>wan</conn0interface>
1420
                </step2>
1421
                <step3>
1422
                        <enable>on</enable>
1423
                        <provider>Panasonic</provider>
1424
                        <address>xx.xx.96.41</address>
1425
                        <download>92</download>
1426
                        <downloadspeed>Kb</downloadspeed>
1427
                        <conn0upload>92</conn0upload>
1428
                        <conn0uploadspeed>Kb</conn0uploadspeed>
1429
                </step3>
1430
                <step4>
1431
                        <bandwidthunit>%</bandwidthunit>
1432
                </step4>
1433
                <step5>
1434
                        <enable>on</enable>
1435
                        <bandwidthunit>%</bandwidthunit>
1436
                        <aimster>on</aimster>
1437
                        <bittorrent>on</bittorrent>
1438
                        <buddyshare>on</buddyshare>
1439
                        <cutemx>on</cutemx>
1440
                        <dcplusplus>on</dcplusplus>
1441
                        <dcc>on</dcc>
1442
                        <directconnect>on</directconnect>
1443
                        <directfileexpress>on</directfileexpress>
1444
                        <edonkey2000>on</edonkey2000>
1445
                        <fasttrack>on</fasttrack>
1446
                        <gnutella>on</gnutella>
1447
                        <grouper>on</grouper>
1448
                        <hotcomm>on</hotcomm>
1449
                        <hotlineconnect>on</hotlineconnect>
1450
                        <imesh>on</imesh>
1451
                        <napster>on</napster>
1452
                        <opennap>on</opennap>
1453
                        <scour>on</scour>
1454
                        <shareaza>on</shareaza>
1455
                        <songspy>on</songspy>
1456
                        <winmx>on</winmx>
1457
                </step5>
1458
                <step6>
1459
                        <enable>on</enable>
1460
                        <quakeiii>on</quakeiii>
1461
                </step6>
1462
                <step7>
1463
                        <enable>on</enable>
1464
                        <msrdp>H</msrdp>
1465
                        <vnc>D</vnc>
1466
                        <appleremotedesktop>D</appleremotedesktop>
1467
                        <pcanywhere>D</pcanywhere>
1468
                        <irc>H</irc>
1469
                        <jabber>D</jabber>
1470
                        <icq>D</icq>
1471
                        <aolinstantmessenger>D</aolinstantmessenger>
1472
                        <msnmessenger>D</msnmessenger>
1473
                        <teamspeak>D</teamspeak>
1474
                        <pptp>D</pptp>
1475
                        <ipsec>D</ipsec>
1476
                        <streamingmp3>H</streamingmp3>
1477
                        <rtsp>H</rtsp>
1478
                        <http>H</http>
1479
                        <smtp>H</smtp>
1480
                        <pop3>D</pop3>
1481
                        <imap>H</imap>
1482
                        <lotusnotes>D</lotusnotes>
1483
                        <dns>H</dns>
1484
                        <icmp>D</icmp>
1485
                        <smb>D</smb>
1486
                        <snmp>D</snmp>
1487
                        <mysqlserver>D</mysqlserver>
1488
                        <nntp>D</nntp>
1489
                        <cvsup>D</cvsup>
1490
                        <slingbox>D</slingbox>
1491
                        <hbci>D</hbci>
1492
                </step7>
1493
        </ezshaper>
1494
</pfsense>