Project

General

Profile

Bug #3921 ยป config.xml

Steven Selph, 10/09/2014 05:08 PM

 
1
<?xml version="1.0"?>
2
<pfsense>
3
	<version>11.1</version>
4
	<lastchange/>
5
	<theme>pfsense_ng</theme>
6
	<sysctl>
7
		<item>
8
			<descr><![CDATA[Enable mounting the FS read only with more checks.]]></descr>
9
			<tunable>vfs.forcesync</tunable>
10
			<value>default</value>
11
		</item>
12
		<item>
13
			<descr><![CDATA[Disable the pf ftp proxy handler.]]></descr>
14
			<tunable>debug.pfftpproxy</tunable>
15
			<value>default</value>
16
		</item>
17
		<item>
18
			<descr><![CDATA[Increase UFS read-ahead speeds to match current state of hard drives and NCQ. More information here: http://ivoras.sharanet.org/blog/tree/2010-11-19.ufs-read-ahead.html]]></descr>
19
			<tunable>vfs.read_max</tunable>
20
			<value>default</value>
21
		</item>
22
		<item>
23
			<descr><![CDATA[Set the ephemeral port range to be lower.]]></descr>
24
			<tunable>net.inet.ip.portrange.first</tunable>
25
			<value>default</value>
26
		</item>
27
		<item>
28
			<descr><![CDATA[Drop packets to closed TCP ports without returning a RST]]></descr>
29
			<tunable>net.inet.tcp.blackhole</tunable>
30
			<value>default</value>
31
		</item>
32
		<item>
33
			<descr><![CDATA[Do not send ICMP port unreachable messages for closed UDP ports]]></descr>
34
			<tunable>net.inet.udp.blackhole</tunable>
35
			<value>default</value>
36
		</item>
37
		<item>
38
			<descr><![CDATA[Randomize the ID field in IP packets (default is 0: sequential IP IDs)]]></descr>
39
			<tunable>net.inet.ip.random_id</tunable>
40
			<value>default</value>
41
		</item>
42
		<item>
43
			<descr><![CDATA[Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)]]></descr>
44
			<tunable>net.inet.tcp.drop_synfin</tunable>
45
			<value>default</value>
46
		</item>
47
		<item>
48
			<descr><![CDATA[Enable sending IPv4 redirects]]></descr>
49
			<tunable>net.inet.ip.redirect</tunable>
50
			<value>default</value>
51
		</item>
52
		<item>
53
			<descr><![CDATA[Enable sending IPv6 redirects]]></descr>
54
			<tunable>net.inet6.ip6.redirect</tunable>
55
			<value>default</value>
56
		</item>
57
		<item>
58
			<descr><![CDATA[Enable privacy settings for IPv6 (RFC 4941)]]></descr>
59
			<tunable>net.inet6.ip6.use_tempaddr</tunable>
60
			<value>default</value>
61
		</item>
62
		<item>
63
			<descr><![CDATA[Prefer privacy addresses and use them over the normal addresses]]></descr>
64
			<tunable>net.inet6.ip6.prefer_tempaddr</tunable>
65
			<value>default</value>
66
		</item>
67
		<item>
68
			<descr><![CDATA[Generate SYN cookies for outbound SYN-ACK packets]]></descr>
69
			<tunable>net.inet.tcp.syncookies</tunable>
70
			<value>default</value>
71
		</item>
72
		<item>
73
			<descr><![CDATA[Maximum incoming/outgoing TCP datagram size (receive)]]></descr>
74
			<tunable>net.inet.tcp.recvspace</tunable>
75
			<value>default</value>
76
		</item>
77
		<item>
78
			<descr><![CDATA[Maximum incoming/outgoing TCP datagram size (send)]]></descr>
79
			<tunable>net.inet.tcp.sendspace</tunable>
80
			<value>default</value>
81
		</item>
82
		<item>
83
			<descr><![CDATA[IP Fastforwarding]]></descr>
84
			<tunable>net.inet.ip.fastforwarding</tunable>
85
			<value>default</value>
86
		</item>
87
		<item>
88
			<descr><![CDATA[Do not delay ACK to try and piggyback it onto a data packet]]></descr>
89
			<tunable>net.inet.tcp.delayed_ack</tunable>
90
			<value>default</value>
91
		</item>
92
		<item>
93
			<descr><![CDATA[Maximum outgoing UDP datagram size]]></descr>
94
			<tunable>net.inet.udp.maxdgram</tunable>
95
			<value>default</value>
96
		</item>
97
		<item>
98
			<descr><![CDATA[Handling of non-IP packets which are not passed to pfil (see if_bridge(4))]]></descr>
99
			<tunable>net.link.bridge.pfil_onlyip</tunable>
100
			<value>default</value>
101
		</item>
102
		<item>
103
			<tunable>net.link.bridge.pfil_member</tunable>
104
			<value>0</value>
105
			<descr><![CDATA[Set to 0 to disable filtering on the incoming and outgoing member interfaces.]]></descr>
106
		</item>
107
		<item>
108
			<descr><![CDATA[Set to 1 to enable filtering on the bridge interface]]></descr>
109
			<tunable>net.link.bridge.pfil_bridge</tunable>
110
			<value>default</value>
111
		</item>
112
		<item>
113
			<descr><![CDATA[Allow unprivileged access to tap(4) device nodes]]></descr>
114
			<tunable>net.link.tap.user_open</tunable>
115
			<value>default</value>
116
		</item>
117
		<item>
118
			<descr><![CDATA[Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())]]></descr>
119
			<tunable>kern.randompid</tunable>
120
			<value>default</value>
121
		</item>
122
		<item>
123
			<descr><![CDATA[Maximum size of the IP input queue]]></descr>
124
			<tunable>net.inet.ip.intr_queue_maxlen</tunable>
125
			<value>default</value>
126
		</item>
127
		<item>
128
			<descr><![CDATA[Disable CTRL+ALT+Delete reboot from keyboard.]]></descr>
129
			<tunable>hw.syscons.kbd_reboot</tunable>
130
			<value>default</value>
131
		</item>
132
		<item>
133
			<descr><![CDATA[Enable TCP Inflight mode]]></descr>
134
			<tunable>net.inet.tcp.inflight.enable</tunable>
135
			<value>default</value>
136
		</item>
137
		<item>
138
			<descr><![CDATA[Enable TCP extended debugging]]></descr>
139
			<tunable>net.inet.tcp.log_debug</tunable>
140
			<value>default</value>
141
		</item>
142
		<item>
143
			<descr><![CDATA[Set ICMP Limits]]></descr>
144
			<tunable>net.inet.icmp.icmplim</tunable>
145
			<value>default</value>
146
		</item>
147
		<item>
148
			<descr><![CDATA[TCP Offload Engine]]></descr>
149
			<tunable>net.inet.tcp.tso</tunable>
150
			<value>default</value>
151
		</item>
152
		<item>
153
			<descr><![CDATA[UDP Checksums]]></descr>
154
			<tunable>net.inet.udp.checksum</tunable>
155
			<value>default</value>
156
		</item>
157
		<item>
158
			<descr><![CDATA[Maximum socket buffer size]]></descr>
159
			<tunable>kern.ipc.maxsockbuf</tunable>
160
			<value>default</value>
161
		</item>
162
	</sysctl>
163
	<system>
164
		<optimization>normal</optimization>
165
		<hostname>pfSense</hostname>
166
		<domain>localdomain</domain>
167
		<dnsserver>8.8.8.8</dnsserver>
168
		<dnsserver>8.8.4.4</dnsserver>
169
		<group>
170
			<name>all</name>
171
			<description><![CDATA[All Users]]></description>
172
			<scope>system</scope>
173
			<gid>1998</gid>
174
		</group>
175
		<group>
176
			<name>admins</name>
177
			<description><![CDATA[System Administrators]]></description>
178
			<scope>system</scope>
179
			<gid>1999</gid>
180
			<member>0</member>
181
			<priv>page-all</priv>
182
		</group>
183
		<user>
184
			<name>admin</name>
185
			<descr><![CDATA[System Administrator]]></descr>
186
			<scope>system</scope>
187
			<groupname>admins</groupname>
188
			<password></password>
189
			<uid>0</uid>
190
			<priv>user-shell-access</priv>
191
			<md5-hash></md5-hash>
192
			<nt-hash></nt-hash>
193
		</user>
194
		<nextuid>2001</nextuid>
195
		<nextgid>2000</nextgid>
196
		<timezone>America/New_York</timezone>
197
		<time-update-interval>300</time-update-interval>
198
		<timeservers>0.pfsense.pool.ntp.org</timeservers>
199
		<webgui>
200
			<protocol>https</protocol>
201
			<ssl-certref></ssl-certref>
202
			<loginautocomplete/>
203
			<port/>
204
			<max_procs>2</max_procs>
205
		</webgui>
206
		<disablenatreflection>yes</disablenatreflection>
207
		<disablesegmentationoffloading/>
208
		<disablelargereceiveoffloading/>
209
		<ipv6allow/>
210
		<powerd_ac_mode>adp</powerd_ac_mode>
211
		<bogons>
212
			<interval>monthly</interval>
213
		</bogons>
214
		<kill_states/>
215
		<enableserial/>
216
		<enablesshd>enabled</enablesshd>
217
		<thermal_hardware>coretemp</thermal_hardware>
218
		<use_mfs_tmp_size/>
219
		<use_mfs_var_size/>
220
		<firmware>
221
			<alturl>
222
				<enable/>
223
				<firmwareurl>https://snapshots.pfsense.org/FreeBSD_releng/10.1/i386/pfSense_HEAD/.updaters/</firmwareurl>
224
			</alturl>
225
		</firmware>
226
		<gitsync>
227
			<repositoryurl/>
228
			<branch/>
229
		</gitsync>
230
		<serialspeed>9600</serialspeed>
231
		<primaryconsole>serial</primaryconsole>
232
		<powerd_enable/>
233
		<powerd_normal_mode>adp</powerd_normal_mode>
234
		<powerd_battery_mode>adp</powerd_battery_mode>
235
	</system>
236
	<interfaces>
237
		<wan>
238
			<enable/>
239
			<if>pppoe0</if>
240
			<blockpriv/>
241
			<blockbogons/>
242
			<descr><![CDATA[WAN]]></descr>
243
			<spoofmac/>
244
			<ipaddr>pppoe</ipaddr>
245
		</wan>
246
		<lan>
247
			<enable/>
248
			<if>bridge0</if>
249
			<descr><![CDATA[LAN]]></descr>
250
			<ipaddr>192.168.1.1</ipaddr>
251
			<subnet>24</subnet>
252
			<spoofmac/>
253
		</lan>
254
		<opt1>
255
			<descr><![CDATA[Guest]]></descr>
256
			<if>em2</if>
257
			<spoofmac/>
258
			<enable/>
259
			<ipaddr>192.168.2.1</ipaddr>
260
			<subnet>24</subnet>
261
		</opt1>
262
		<opt2>
263
			<descr><![CDATA[LANWifi]]></descr>
264
			<if>ath0</if>
265
			<wireless>
266
				<mode>hostap</mode>
267
				<standard>11ng</standard>
268
				<protmode>off</protmode>
269
				<ssid></ssid>
270
				<channel>11</channel>
271
				<authmode/>
272
				<txpower>99</txpower>
273
				<distance/>
274
				<regdomain>fcc</regdomain>
275
				<regcountry>US</regcountry>
276
				<reglocation>anywhere</reglocation>
277
				<wpa>
278
					<macaddr_acl/>
279
					<auth_algs>1</auth_algs>
280
					<wpa_mode>2</wpa_mode>
281
					<wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
282
					<wpa_pairwise>CCMP</wpa_pairwise>
283
					<wpa_group_rekey>60</wpa_group_rekey>
284
					<wpa_gmk_rekey>3600</wpa_gmk_rekey>
285
					<passphrase></passphrase>
286
					<ext_wpa_sw/>
287
					<enable/>
288
				</wpa>
289
				<auth_server_addr/>
290
				<auth_server_port/>
291
				<auth_server_shared_secret/>
292
				<auth_server_addr2/>
293
				<auth_server_port2/>
294
				<auth_server_shared_secret2/>
295
				<apbridge>
296
					<enable/>
297
				</apbridge>
298
				<txantenna>0</txantenna>
299
				<rxantenna>0</rxantenna>
300
				<wep/>
301
			</wireless>
302
			<enable/>
303
			<spoofmac/>
304
		</opt2>
305
		<opt3>
306
			<descr><![CDATA[LANWired]]></descr>
307
			<if>em1</if>
308
			<enable/>
309
			<spoofmac/>
310
		</opt3>
311
	</interfaces>
312
	<staticroutes/>
313
	<dhcpd>
314
		<lan>
315
			<enable/>
316
			<range>
317
				<from>192.168.1.100</from>
318
				<to>192.168.1.245</to>
319
			</range>
320
			<failover_peerip/>
321
			<dhcpleaseinlocaltime/>
322
			<defaultleasetime/>
323
			<maxleasetime/>
324
			<netmask/>
325
			<gateway/>
326
			<domain/>
327
			<domainsearchlist/>
328
			<ddnsdomain/>
329
			<mac_allow/>
330
			<mac_deny/>
331
			<tftp/>
332
			<ldap/>
333
			<nextserver/>
334
			<filename/>
335
			<rootpath/>
336
			<numberoptions/>
337
			<staticmap>
338
				<mac>00:00:00:00:00:79</mac>
339
				<ipaddr>192.168.1.52</ipaddr>
340
				<hostname/>
341
				<descr><![CDATA[xxx]]></descr>
342
				<filename/>
343
				<rootpath/>
344
				<defaultleasetime/>
345
				<maxleasetime/>
346
				<gateway/>
347
				<domain/>
348
				<domainsearchlist/>
349
				<ddnsdomain/>
350
				<tftp/>
351
				<ldap/>
352
			</staticmap>
353
			<staticmap>
354
				<mac>00:00:00:00:00:78</mac>
355
				<ipaddr>192.168.1.53</ipaddr>
356
				<hostname/>
357
				<descr><![CDATA[xxx]]></descr>
358
				<filename/>
359
				<rootpath/>
360
				<defaultleasetime/>
361
				<maxleasetime/>
362
				<gateway/>
363
				<domain/>
364
				<domainsearchlist/>
365
				<ddnsdomain/>
366
				<tftp/>
367
				<ldap/>
368
			</staticmap>
369
			<staticmap>
370
				<mac>00:00:00:00:00:77</mac>
371
				<ipaddr>192.168.1.55</ipaddr>
372
				<hostname>sselph-macbookpro</hostname>
373
				<descr><![CDATA[xxx]]></descr>
374
				<filename/>
375
				<rootpath/>
376
				<defaultleasetime/>
377
				<maxleasetime/>
378
				<gateway/>
379
				<domain/>
380
				<domainsearchlist/>
381
				<ddnsdomain/>
382
				<tftp/>
383
				<ldap/>
384
			</staticmap>
385
			<staticmap>
386
				<mac>00:00:00:00:00:76</mac>
387
				<ipaddr>192.168.1.60</ipaddr>
388
				<hostname/>
389
				<descr><![CDATA[xxx]]></descr>
390
				<filename/>
391
				<rootpath/>
392
				<defaultleasetime/>
393
				<maxleasetime/>
394
				<gateway/>
395
				<domain/>
396
				<domainsearchlist/>
397
				<ddnsdomain/>
398
				<tftp/>
399
				<ldap/>
400
			</staticmap>
401
			<staticmap>
402
				<mac>00:00:00:00:00:75</mac>
403
				<ipaddr>192.168.1.65</ipaddr>
404
				<hostname/>
405
				<descr><![CDATA[xxx]]></descr>
406
				<filename/>
407
				<rootpath/>
408
				<defaultleasetime/>
409
				<maxleasetime/>
410
				<gateway/>
411
				<domain/>
412
				<domainsearchlist/>
413
				<ddnsdomain/>
414
				<tftp/>
415
				<ldap/>
416
			</staticmap>
417
			<staticmap>
418
				<mac>00:00:00:00:00:74</mac>
419
				<ipaddr>192.168.1.66</ipaddr>
420
				<hostname/>
421
				<descr><![CDATA[xxx]]></descr>
422
				<filename/>
423
				<rootpath/>
424
				<defaultleasetime/>
425
				<maxleasetime/>
426
				<gateway/>
427
				<domain/>
428
				<domainsearchlist/>
429
				<ddnsdomain/>
430
				<tftp/>
431
				<ldap/>
432
			</staticmap>
433
		</lan>
434
		<opt1>
435
			<range>
436
				<from>192.168.2.100</from>
437
				<to>192.168.2.200</to>
438
			</range>
439
			<enable/>
440
			<failover_peerip/>
441
			<dhcpleaseinlocaltime/>
442
			<defaultleasetime/>
443
			<maxleasetime/>
444
			<netmask/>
445
			<gateway/>
446
			<domain/>
447
			<domainsearchlist/>
448
			<ddnsdomain/>
449
			<mac_allow/>
450
			<mac_deny/>
451
			<tftp/>
452
			<ldap/>
453
			<nextserver/>
454
			<filename/>
455
			<rootpath/>
456
			<numberoptions/>
457
		</opt1>
458
	</dhcpd>
459
	<pptpd>
460
		<mode/>
461
		<redir/>
462
		<localip/>
463
		<remoteip/>
464
	</pptpd>
465
	<dnsmasq>
466
		<enable/>
467
	</dnsmasq>
468
	<snmpd>
469
		<syslocation/>
470
		<syscontact/>
471
		<rocommunity>public</rocommunity>
472
	</snmpd>
473
	<diag>
474
		<ipv6nat>
475
			<ipaddr/>
476
		</ipv6nat>
477
	</diag>
478
	<bridge/>
479
	<syslog>
480
		<nentries>500</nentries>
481
	</syslog>
482
	<nat>
483
		<rule>
484
			<source>
485
				<any/>
486
			</source>
487
			<destination>
488
				<network>wanip</network>
489
				<port>39435</port>
490
			</destination>
491
			<protocol>tcp/udp</protocol>
492
			<target>192.168.1.53</target>
493
			<local-port>39435</local-port>
494
			<interface>wan</interface>
495
			<descr/>
496
			<associated-rule-id>nat_5287b17ca685f1.94949666</associated-rule-id>
497
			<created>
498
				<time>1384624508</time>
499
				<username>admin@192.168.1.105</username>
500
			</created>
501
			<updated>
502
				<time>1394765038</time>
503
				<username>admin@192.168.1.55</username>
504
			</updated>
505
			<tracker>1412311184</tracker>
506
		</rule>
507
		<rule>
508
			<source>
509
				<any/>
510
			</source>
511
			<destination>
512
				<network>wanip</network>
513
				<port>46933</port>
514
			</destination>
515
			<protocol>tcp/udp</protocol>
516
			<target>192.168.1.53</target>
517
			<local-port>46933</local-port>
518
			<interface>wan</interface>
519
			<descr/>
520
			<associated-rule-id>nat_53b7134db01b68.47907148</associated-rule-id>
521
			<updated>
522
				<time>1404506957</time>
523
				<username>admin@192.168.1.55</username>
524
			</updated>
525
			<created>
526
				<time>1404506957</time>
527
				<username>admin@192.168.1.55</username>
528
			</created>
529
			<tracker>1412311185</tracker>
530
		</rule>
531
		<rule>
532
			<source>
533
				<any/>
534
			</source>
535
			<destination>
536
				<network>wanip</network>
537
				<port>2222</port>
538
			</destination>
539
			<protocol>tcp</protocol>
540
			<target>192.168.1.53</target>
541
			<local-port>22</local-port>
542
			<interface>wan</interface>
543
			<descr/>
544
			<associated-rule-id>nat_5287b192a847a4.34260688</associated-rule-id>
545
			<updated>
546
				<time>1384624530</time>
547
				<username>admin@192.168.1.105</username>
548
			</updated>
549
			<created>
550
				<time>1384624530</time>
551
				<username>admin@192.168.1.105</username>
552
			</created>
553
			<tracker>1412311186</tracker>
554
		</rule>
555
		<outbound>
556
			<mode>automatic</mode>
557
		</outbound>
558
	</nat>
559
	<filter>
560
		<rule>
561
			<id/>
562
			<type>pass</type>
563
			<interface>wan</interface>
564
			<ipprotocol>inet</ipprotocol>
565
			<tag/>
566
			<tagged/>
567
			<max/>
568
			<max-src-nodes/>
569
			<max-src-conn/>
570
			<max-src-states/>
571
			<statetimeout/>
572
			<statetype>keep state</statetype>
573
			<os/>
574
			<protocol>tcp/udp</protocol>
575
			<source>
576
				<any/>
577
			</source>
578
			<destination>
579
				<address>192.168.1.53</address>
580
				<port>39435</port>
581
			</destination>
582
			<descr><![CDATA[NAT ]]></descr>
583
			<associated-rule-id>nat_5287b17ca685f1.94949666</associated-rule-id>
584
			<created>
585
				<time>1384624508</time>
586
				<username>NAT Port Forward</username>
587
			</created>
588
			<updated>
589
				<time>1394765057</time>
590
				<username>admin@192.168.1.55</username>
591
			</updated>
592
			<tracker>1412311184</tracker>
593
		</rule>
594
		<rule>
595
			<source>
596
				<any/>
597
			</source>
598
			<interface>wan</interface>
599
			<protocol>tcp</protocol>
600
			<destination>
601
				<address>192.168.1.53</address>
602
				<port>22</port>
603
			</destination>
604
			<descr><![CDATA[NAT ]]></descr>
605
			<associated-rule-id>nat_5287b192a847a4.34260688</associated-rule-id>
606
			<created>
607
				<time>1384624530</time>
608
				<username>NAT Port Forward</username>
609
			</created>
610
			<tracker>1412311185</tracker>
611
		</rule>
612
		<rule>
613
			<source>
614
				<any/>
615
			</source>
616
			<interface>wan</interface>
617
			<protocol>tcp/udp</protocol>
618
			<destination>
619
				<address>192.168.1.53</address>
620
				<port>46933</port>
621
			</destination>
622
			<descr><![CDATA[NAT ]]></descr>
623
			<associated-rule-id>nat_53b7134db01b68.47907148</associated-rule-id>
624
			<created>
625
				<time>1404506957</time>
626
				<username>NAT Port Forward</username>
627
			</created>
628
			<tracker>1412311192</tracker>
629
		</rule>
630
		<rule>
631
			<type>pass</type>
632
			<ipprotocol>inet</ipprotocol>
633
			<descr><![CDATA[Default allow LAN to any rule]]></descr>
634
			<interface>lan</interface>
635
			<source>
636
				<network>lan</network>
637
			</source>
638
			<destination>
639
				<any/>
640
			</destination>
641
			<tracker>1412311186</tracker>
642
		</rule>
643
		<rule>
644
			<id/>
645
			<type>pass</type>
646
			<interface>lan</interface>
647
			<ipprotocol>inet6</ipprotocol>
648
			<tag/>
649
			<tagged/>
650
			<max/>
651
			<max-src-nodes/>
652
			<max-src-conn/>
653
			<max-src-states/>
654
			<statetimeout/>
655
			<statetype>keep state</statetype>
656
			<os/>
657
			<source>
658
				<network>lan</network>
659
			</source>
660
			<destination>
661
				<any/>
662
			</destination>
663
			<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
664
			<updated>
665
				<time>1384650081</time>
666
				<username>admin@192.168.1.105</username>
667
			</updated>
668
			<tracker>1412311187</tracker>
669
		</rule>
670
		<rule>
671
			<id/>
672
			<tracker>1412311188</tracker>
673
			<type>block</type>
674
			<interface>opt1</interface>
675
			<ipprotocol>inet</ipprotocol>
676
			<tag/>
677
			<tagged/>
678
			<max/>
679
			<max-src-nodes/>
680
			<max-src-conn/>
681
			<max-src-states/>
682
			<statetimeout/>
683
			<statetype>keep state</statetype>
684
			<os/>
685
			<protocol>tcp</protocol>
686
			<source>
687
				<network>opt1</network>
688
			</source>
689
			<destination>
690
				<address>192.168.2.1</address>
691
				<port>MgmtPorts</port>
692
			</destination>
693
			<descr/>
694
			<created>
695
				<time>1385591239</time>
696
				<username>admin@192.168.1.55</username>
697
			</created>
698
			<updated>
699
				<time>1412312417</time>
700
				<username>admin@192.168.1.55</username>
701
			</updated>
702
		</rule>
703
		<rule>
704
			<id/>
705
			<tracker>1412311189</tracker>
706
			<type>block</type>
707
			<interface>opt1</interface>
708
			<ipprotocol>inet</ipprotocol>
709
			<tag/>
710
			<tagged/>
711
			<max/>
712
			<max-src-nodes/>
713
			<max-src-conn/>
714
			<max-src-states/>
715
			<statetimeout/>
716
			<statetype>keep state</statetype>
717
			<os/>
718
			<source>
719
				<network>opt1</network>
720
			</source>
721
			<destination>
722
				<network>lan</network>
723
			</destination>
724
			<descr/>
725
			<created>
726
				<time>1385589172</time>
727
				<username>admin@192.168.1.55</username>
728
			</created>
729
			<updated>
730
				<time>1412312428</time>
731
				<username>admin@192.168.1.55</username>
732
			</updated>
733
		</rule>
734
		<rule>
735
			<id/>
736
			<tracker>1412311190</tracker>
737
			<type>pass</type>
738
			<interface>opt1</interface>
739
			<ipprotocol>inet</ipprotocol>
740
			<tag/>
741
			<tagged/>
742
			<max/>
743
			<max-src-nodes/>
744
			<max-src-conn/>
745
			<max-src-states/>
746
			<statetimeout/>
747
			<statetype>keep state</statetype>
748
			<os></os>
749
			<protocol>tcp/udp</protocol>
750
			<source>
751
				<network>opt1</network>
752
			</source>
753
			<destination>
754
				<any/>
755
			</destination>
756
			<log/>
757
			<descr/>
758
			<l7container>Opt1Block</l7container>
759
			<created>
760
				<time>1385827093</time>
761
				<username>admin@192.168.1.55</username>
762
			</created>
763
			<updated>
764
				<time>1412887586</time>
765
				<username>admin@192.168.1.55</username>
766
			</updated>
767
		</rule>
768
		<rule>
769
			<id/>
770
			<tracker>1412311191</tracker>
771
			<type>pass</type>
772
			<interface>opt1</interface>
773
			<ipprotocol>inet</ipprotocol>
774
			<tag/>
775
			<tagged/>
776
			<max/>
777
			<max-src-nodes/>
778
			<max-src-conn/>
779
			<max-src-states/>
780
			<statetimeout/>
781
			<statetype>keep state</statetype>
782
			<os/>
783
			<source>
784
				<network>opt1</network>
785
			</source>
786
			<destination>
787
				<any/>
788
			</destination>
789
			<descr/>
790
			<created>
791
				<time>1385589216</time>
792
				<username>admin@192.168.1.55</username>
793
			</created>
794
			<updated>
795
				<time>1412868774</time>
796
				<username>admin@192.168.1.55</username>
797
			</updated>
798
		</rule>
799
	</filter>
800
	<shaper>
801
		<queue>
802
			<interface>wan</interface>
803
			<name>wan</name>
804
			<scheduler>CODELQ</scheduler>
805
			<bandwidth>200</bandwidth>
806
			<bandwidthtype>Kb</bandwidthtype>
807
			<enabled>on</enabled>
808
		</queue>
809
	</shaper>
810
	<ipsec/>
811
	<aliases>
812
		<alias>
813
			<name>MgmtPorts</name>
814
			<address>443 80 22</address>
815
			<descr/>
816
			<type>port</type>
817
			<detail><![CDATA[Entry added Wed, 27 Nov 2013 17:25:07 -0500||Entry added Wed, 27 Nov 2013 17:25:07 -0500||Entry added Wed, 27 Nov 2013 17:25:07 -0500]]></detail>
818
		</alias>
819
	</aliases>
820
	<proxyarp/>
821
	<cron>
822
		<item>
823
			<minute>1,31</minute>
824
			<hour>0-5</hour>
825
			<mday>*</mday>
826
			<month>*</month>
827
			<wday>*</wday>
828
			<who>root</who>
829
			<command>/usr/bin/nice -n20 adjkerntz -a</command>
830
		</item>
831
		<item>
832
			<minute>1</minute>
833
			<hour>3</hour>
834
			<mday>1</mday>
835
			<month>*</month>
836
			<wday>*</wday>
837
			<who>root</who>
838
			<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
839
		</item>
840
		<item>
841
			<minute>*/60</minute>
842
			<hour>*</hour>
843
			<mday>*</mday>
844
			<month>*</month>
845
			<wday>*</wday>
846
			<who>root</who>
847
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
848
		</item>
849
		<item>
850
			<minute>1</minute>
851
			<hour>1</hour>
852
			<mday>*</mday>
853
			<month>*</month>
854
			<wday>*</wday>
855
			<who>root</who>
856
			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
857
		</item>
858
		<item>
859
			<minute>*/60</minute>
860
			<hour>*</hour>
861
			<mday>*</mday>
862
			<month>*</month>
863
			<wday>*</wday>
864
			<who>root</who>
865
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
866
		</item>
867
		<item>
868
			<minute>30</minute>
869
			<hour>12</hour>
870
			<mday>*</mday>
871
			<month>*</month>
872
			<wday>*</wday>
873
			<who>root</who>
874
			<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
875
		</item>
876
	</cron>
877
	<wol>
878
		<wolentry>
879
			<interface>lan</interface>
880
			<mac>00:00:00:00:00:79</mac>
881
			<descr><![CDATA[NAS]]></descr>
882
		</wolentry>
883
		<wolentry>
884
			<interface>lan</interface>
885
			<mac>00:00:00:00:00:b7</mac>
886
			<descr><![CDATA[Server]]></descr>
887
		</wolentry>
888
	</wol>
889
	<rrd>
890
		<enable/>
891
		<category>traffic</category>
892
		<style>inverse</style>
893
		<period>absolute</period>
894
	</rrd>
895
	<load_balancer>
896
		<monitor_type>
897
			<name>ICMP</name>
898
			<type>icmp</type>
899
			<descr><![CDATA[ICMP]]></descr>
900
			<options/>
901
		</monitor_type>
902
		<monitor_type>
903
			<name>TCP</name>
904
			<type>tcp</type>
905
			<descr><![CDATA[Generic TCP]]></descr>
906
			<options/>
907
		</monitor_type>
908
		<monitor_type>
909
			<name>HTTP</name>
910
			<type>http</type>
911
			<descr><![CDATA[Generic HTTP]]></descr>
912
			<options>
913
				<path>/</path>
914
				<host/>
915
				<code>200</code>
916
			</options>
917
		</monitor_type>
918
		<monitor_type>
919
			<name>HTTPS</name>
920
			<type>https</type>
921
			<descr><![CDATA[Generic HTTPS]]></descr>
922
			<options>
923
				<path>/</path>
924
				<host/>
925
				<code>200</code>
926
			</options>
927
		</monitor_type>
928
		<monitor_type>
929
			<name>SMTP</name>
930
			<type>send</type>
931
			<descr><![CDATA[Generic SMTP]]></descr>
932
			<options>
933
				<send/>
934
				<expect>220 *</expect>
935
			</options>
936
		</monitor_type>
937
	</load_balancer>
938
	<widgets>
939
		<sequence>system_information-container:col1:show,captive_portal_status-container:col1:close,carp_status-container:col1:close,cpu_graphs-container:col1:close,gmirror_status-container:col1:close,installed_packages-container:col1:close,interface_statistics-container:col1:close,interfaces-container:col2:show,ipsec-container:col2:close,load_balancer_status-container:col2:close,log-container:col2:close,picture-container:col2:close,rss-container:col2:close,services_status-container:col2:close,traffic_graphs-container:col2:close,dyn_dns_status-container:col2:show,openvpn-container:col2:none,smart_status-container:col2:show,gateways-container:col2:show,thermal_sensors-container:col2:close,wake_on_lan-container:col2:none</sequence>
940
	</widgets>
941
	<revision>
942
		<time>1412887586</time>
943
		<description><![CDATA[admin@192.168.1.55: /firewall_rules_edit.php made unknown change]]></description>
944
		<username>admin@192.168.1.55</username>
945
	</revision>
946
	<openvpn/>
947
	<l7shaper>
948
		<container/>
949
		<container>
950
			<name>Opt1Block</name>
951
			<enabled>on</enabled>
952
			<description/>
953
			<divert_port>45164</divert_port>
954
			<l7rules>
955
				<protocol>bittorrent</protocol>
956
				<structure>action</structure>
957
				<behaviour>block</behaviour>
958
			</l7rules>
959
			<l7rules>
960
				<protocol>smtp</protocol>
961
				<structure>action</structure>
962
				<behaviour>block</behaviour>
963
			</l7rules>
964
		</container>
965
	</l7shaper>
966
	<dnshaper>
967
		<queue>
968
			<name>Download</name>
969
			<number>1</number>
970
			<qlimit/>
971
			<plr/>
972
			<description/>
973
			<bandwidth>
974
				<item>
975
					<bw>1</bw>
976
					<burst>2</burst>
977
					<bwscale>Mb</bwscale>
978
					<bwsched>none</bwsched>
979
				</item>
980
			</bandwidth>
981
			<enabled>on</enabled>
982
			<buckets/>
983
			<mask>dstaddress</mask>
984
			<maskbits>24</maskbits>
985
			<maskbitsv6/>
986
			<delay>0</delay>
987
		</queue>
988
		<queue>
989
			<name>Upload</name>
990
			<number>2</number>
991
			<qlimit/>
992
			<plr/>
993
			<description/>
994
			<bandwidth>
995
				<item>
996
					<bw>100</bw>
997
					<burst>200</burst>
998
					<bwscale>Kb</bwscale>
999
					<bwsched>none</bwsched>
1000
				</item>
1001
			</bandwidth>
1002
			<enabled>on</enabled>
1003
			<buckets/>
1004
			<mask>srcaddress</mask>
1005
			<maskbits>24</maskbits>
1006
			<maskbitsv6/>
1007
			<delay>0</delay>
1008
		</queue>
1009
	</dnshaper>
1010
	<ppps>
1011
		<ppp>
1012
			<ptpid>0</ptpid>
1013
			<type>pppoe</type>
1014
			<if>pppoe0</if>
1015
			<ports>em0</ports>
1016
			<username></username>
1017
			<password></password>
1018
			<provider/>
1019
		</ppp>
1020
	</ppps>
1021
	<dyndnses>
1022
		<dyndns>
1023
			<type>noip-free</type>
1024
			<username></username>
1025
			<password></password>
1026
			<host></host>
1027
			<mx/>
1028
			<enable/>
1029
			<interface>wan</interface>
1030
			<zoneid/>
1031
			<ttl/>
1032
			<updateurl/>
1033
			<resultmatch/>
1034
			<requestif>wan</requestif>
1035
			<descr/>
1036
			<force/>
1037
			<id>1</id>
1038
		</dyndns>
1039
	</dyndnses>
1040
	<gateways>
1041
		<gateway_item>
1042
			<interface>wan</interface>
1043
			<gateway>dynamic</gateway>
1044
			<name>WAN_PPPOE</name>
1045
			<weight>1</weight>
1046
			<ipprotocol>inet</ipprotocol>
1047
			<interval/>
1048
			<descr><![CDATA[Interface WAN_PPPOE Gateway]]></descr>
1049
			<monitor>8.8.8.8</monitor>
1050
			<defaultgw/>
1051
		</gateway_item>
1052
	</gateways>
1053
	<installedpackages>
1054
		<miniupnpd>
1055
			<config>
1056
				<enable/>
1057
				<enable_upnp/>
1058
				<enable_natpmp/>
1059
				<ext_iface>wan</ext_iface>
1060
				<iface_array>lan</iface_array>
1061
				<download/>
1062
				<upload/>
1063
				<overridewanip/>
1064
				<upnpqueue/>
1065
				<logpackets/>
1066
				<sysuptime/>
1067
				<permdefault/>
1068
				<permuser1/>
1069
				<permuser2/>
1070
				<permuser3/>
1071
				<permuser4/>
1072
			</config>
1073
		</miniupnpd>
1074
		<service/>
1075
		<package>
1076
			<name>Shellcmd</name>
1077
			<website/>
1078
			<descr><![CDATA[The shellcmd utility is used to manage commands on system startup.]]></descr>
1079
			<category>Services</category>
1080
			<pkginfolink/>
1081
			<config_file>https://packages.pfsense.org/packages/config/shellcmd/shellcmd.xml</config_file>
1082
			<version>0.5</version>
1083
			<status>Beta</status>
1084
			<required_version>2.2</required_version>
1085
			<maintainer>markjcrane@gmail.com</maintainer>
1086
			<configurationfile>shellcmd.xml</configurationfile>
1087
			<depends_on_package_base_url>https://files.pfsense.org/packages/10/All/</depends_on_package_base_url>
1088
		</package>
1089
		<menu>
1090
			<name>Shellcmd</name>
1091
			<tooltiptext>shellcmd settings.</tooltiptext>
1092
			<section>Services</section>
1093
			<configfile>shellcmd.xml</configfile>
1094
			<url>/packages/shellcmd/shellcmd.php</url>
1095
		</menu>
1096
		<tab>
1097
			<text>Settings</text>
1098
			<url>/pkg_edit.php?xml=shellcmd.xml&amp;id=0</url>
1099
			<active/>
1100
		</tab>
1101
	</installedpackages>
1102
	<dhcpdv6/>
1103
	<dhcrelay/>
1104
	<dhcrelay6/>
1105
	<wireless/>
1106
	<bridges>
1107
		<bridged>
1108
			<members>opt2,opt3</members>
1109
			<descr/>
1110
			<maxaddr/>
1111
			<timeout/>
1112
			<maxage/>
1113
			<fwdelay/>
1114
			<hellotime/>
1115
			<priority/>
1116
			<proto>rstp</proto>
1117
			<holdcnt/>
1118
			<ifpriority/>
1119
			<ifpathcost/>
1120
			<bridgeif>bridge0</bridgeif>
1121
		</bridged>
1122
	</bridges>
1123
	<ntpd/>
1124
</pfsense>
    (1-1/1)