pfSense

<?xml version="1.0"?>

<pfsense>

	<version>11.9</version>

	<lastchange/>

	<theme>pfsense_ng</theme>

	<system>

		<optimization>normal</optimization>

		<hostname>kx-old-fw1</hostname>

		<domain>cmn.local</domain>

		<group>

			<name>all</name>

			<description><![CDATA[All Users]]></description>

			<scope>system</scope>

			<gid>1998</gid>

			<member>0</member>

		</group>

		<group>

			<name>admins</name>

			<description><![CDATA[System Administrators]]></description>

			<scope>system</scope>

			<gid>1999</gid>

			<member>0</member>

			<priv>page-all</priv>

		</group>

		<user>

			<name>admin</name>

			<descr><![CDATA[System Administrator]]></descr>

			<scope>system</scope>

			<groupname>admins</groupname>

			<password>XXX</password>

			<uid>0</uid>

			<priv>user-shell-access</priv>

			<md5-hash>f071f011a53a3410c6570f7d4129bc9f</md5-hash>

			<nt-hash>3034383731333663356633633438373433363761646235643130313965363937</nt-hash>

		</user>

		<nextuid>2000</nextuid>

		<nextgid>2000</nextgid>

		<timezone>Europe/Berlin</timezone>

		<time-update-interval/>

		<timeservers>0.de.pool.ntp.org</timeservers>

		<webgui>

			<protocol>https</protocol>

			<loginautocomplete/>

			<ssl-certref>561b9dd7e98c9</ssl-certref>

			<port/>

			<max_procs>2</max_procs>

		</webgui>

		<disablenatreflection>yes</disablenatreflection>

		<disablesegmentationoffloading/>

		<disablelargereceiveoffloading/>

		<ipv6allow/>

		<powerd_ac_mode>hadp</powerd_ac_mode>

		<powerd_battery_mode>hadp</powerd_battery_mode>

		<powerd_normal_mode>hadp</powerd_normal_mode>

		<bogons>

			<interval>monthly</interval>

		</bogons>

		<kill_states/>

		<enablesshd>enabled</enablesshd>

		<language>en_US</language>

		<dns1gw>none</dns1gw>

		<dns2gw>none</dns2gw>

		<dns3gw>none</dns3gw>

		<dns4gw>none</dns4gw>

		<maximumstates/>

		<aliasesresolveinterval/>

		<maximumtableentries/>

		<maximumfrags/>

		<reflectiontimeout/>

		<disableconsolemenu/>

		<serialspeed>115200</serialspeed>

		<primaryconsole>serial</primaryconsole>

		<enableserial/>

		<dnsserver>185.74.180.3</dnsserver>

		<dnsserver>185.74.183.111</dnsserver>

		<dnsserver>8.8.8.8</dnsserver>

		<dnsserver>8.8.4.4</dnsserver>

		<dnsallowoverride/>

	</system>

	<interfaces>

		<wan>

			<if>rl0</if>

			<blockpriv/>

			<blockbogons/>

			<descr><![CDATA[WAN]]></descr>

			<spoofmac/>

			<media>autoselect</media>

			<alias-address/>

			<alias-subnet>32</alias-subnet>

			<enable/>

			<ipaddr>dhcp</ipaddr>

			<dhcphostname/>

			<dhcprejectfrom/>

			<adv_dhcp_pt_timeout/>

			<adv_dhcp_pt_retry/>

			<adv_dhcp_pt_select_timeout/>

			<adv_dhcp_pt_reboot/>

			<adv_dhcp_pt_backoff_cutoff/>

			<adv_dhcp_pt_initial_interval/>

			<adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>

			<adv_dhcp_send_options/>

			<adv_dhcp_request_options/>

			<adv_dhcp_required_options/>

			<adv_dhcp_option_modifiers/>

			<adv_dhcp_config_advanced/>

			<adv_dhcp_config_file_override/>

			<adv_dhcp_config_file_override_path/>

			<ipaddrv6>dhcp6</ipaddrv6>

			<dhcp6-duid/>

			<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>

		</wan>

		<lan>

			<enable/>

			<if>rl1</if>

			<descr><![CDATA[CMN]]></descr>

			<spoofmac/>

			<ipaddr>10.10.105.1</ipaddr>

			<subnet>29</subnet>

		</lan>

		<opt1>

			<descr><![CDATA[CT100]]></descr>

			<if>rl1_vlan100</if>

			<enable/>

			<spoofmac/>

			<ipaddr>185.74.183.241</ipaddr>

			<subnet>28</subnet>

		</opt1>

		<opt2>

			<descr><![CDATA[CMN_P]]></descr>

			<if>rl1_vlan2</if>

			<spoofmac/>

			<enable/>

		</opt2>

		<opt3>

			<descr><![CDATA[VoIP_P]]></descr>

			<if>rl1_vlan3</if>

			<enable/>

			<spoofmac/>

		</opt3>

	</interfaces>

	<staticroutes/>

	<dhcpd>

		<lan>

			<range>

				<from>10.3.30.50</from>

				<to>10.3.30.200</to>

			</range>

			<failover_peerip/>

			<dhcpleaseinlocaltime/>

			<defaultleasetime/>

			<maxleasetime/>

			<netmask/>

			<gateway/>

			<domain/>

			<domainsearchlist>ruhe-agrar.local</domainsearchlist>

			<ddnsdomain/>

			<ddnsdomainprimary/>

			<ddnsdomainkeyname/>

			<ddnsdomainkey/>

			<mac_allow/>

			<mac_deny/>

			<tftp/>

			<ldap/>

			<nextserver/>

			<filename/>

			<filename32/>

			<filename64/>

			<rootpath/>

			<numberoptions/>

			<dnsserver>10.3.30.2</dnsserver>

			<dnsserver>8.8.8.8</dnsserver>

			<dnsserver>8.8.4.4</dnsserver>

		</lan>

	</dhcpd>

	<pptpd>

		<mode/>

		<redir/>

		<localip/>

		<remoteip/>

	</pptpd>

	<snmpd>

		<syslocation/>

		<syscontact/>

		<rocommunity>public</rocommunity>

	</snmpd>

	<diag>

		<ipv6nat>

			<ipaddr/>

		</ipv6nat>

	</diag>

	<bridge/>

	<syslog>

		<reverse/>

		<nentries>100</nentries>

		<sourceip/>

		<ipproto>ipv4</ipproto>

	</syslog>

	<nat>

		<outbound>

			<mode>automatic</mode>

		</outbound>

	</nat>

	<filter>

		<rule>

			<type>block</type>

			<interface>wan</interface>

			<ipprotocol>inet</ipprotocol>

			<source>

				<address>EasyRuleBlockHostsWAN</address>

			</source>

			<destination>

				<any/>

			</destination>

			<descr><![CDATA[Easy Rule: Blocked from Firewall Log View]]></descr>

			<created>

				<time>1446048508</time>

				<username>Easy Rule</username>

			</created>

		</rule>

		<rule>

			<id/>

			<tracker>1445424144</tracker>

			<type>pass</type>

			<interface>wan</interface>

			<ipprotocol>inet</ipprotocol>

			<tag/>

			<tagged/>

			<max/>

			<max-src-nodes/>

			<max-src-conn/>

			<max-src-states/>

			<statetimeout/>

			<statetype>keep state</statetype>

			<os/>

			<protocol>tcp</protocol>

			<source>

				<address>185.74.183.110</address>

			</source>

			<destination>

				<any/>

				<port>500</port>

			</destination>

			<log/>

			<descr><![CDATA[IPSec WAN]]></descr>

			<updated>

				<time>1445424144</time>

				<username>admin@10.10.105.6</username>

			</updated>

			<created>

				<time>1445424144</time>

				<username>admin@10.10.105.6</username>

			</created>

		</rule>

		<rule>

			<id/>

			<tracker>1445598641</tracker>

			<type>pass</type>

			<interface>wan</interface>

			<ipprotocol>inet</ipprotocol>

			<tag/>

			<tagged/>

			<max/>

			<max-src-nodes/>

			<max-src-conn/>

			<max-src-states/>

			<statetimeout/>

			<statetype>keep state</statetype>

			<os/>

			<protocol>tcp</protocol>

			<source>

				<address>185.74.183.110</address>

			</source>

			<destination>

				<any/>

				<port>4500</port>

			</destination>

			<log/>

			<descr><![CDATA[IPSec WAN over NAT]]></descr>

			<updated>

				<time>1445598641</time>

				<username>admin@10.10.105.6</username>

			</updated>

			<created>

				<time>1445598641</time>

				<username>admin@10.10.105.6</username>

			</created>

		</rule>

		<rule>

			<id/>

			<tracker>1445598529</tracker>

			<type>pass</type>

			<interface>wan</interface>

			<ipprotocol>inet</ipprotocol>

			<tag/>

			<tagged/>

			<max/>

			<max-src-nodes/>

			<max-src-conn/>

			<max-src-states/>

			<statetimeout/>

			<statetype>keep state</statetype>

			<os/>

			<source>

				<address>185.74.180.0/22</address>

			</source>

			<destination>

				<network>wanip</network>

			</destination>

			<descr><![CDATA[enable acces from KOMNEXX AS]]></descr>

			<created>

				<time>1445594241</time>

				<username>Easy Rule</username>

			</created>

			<updated>

				<time>1446103512</time>

				<username>admin@10.10.105.6</username>

			</updated>

		</rule>

		<rule>

			<type>pass</type>

			<ipprotocol>inet</ipprotocol>

			<descr><![CDATA[Default allow LAN to any rule]]></descr>

			<interface>lan</interface>

			<tracker>0100000101</tracker>

			<source>

				<network>lan</network>

			</source>

			<destination>

				<any/>

			</destination>

		</rule>

		<rule>

			<type>pass</type>

			<ipprotocol>inet6</ipprotocol>

			<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>

			<interface>lan</interface>

			<tracker>0100000102</tracker>

			<source>

				<network>lan</network>

			</source>

			<destination>

				<any/>

			</destination>

		</rule>

		<rule>

			<type>pass</type>

			<interface>lan</interface>

			<ipprotocol>inet</ipprotocol>

			<descr><![CDATA[Easy Rule: Passed from Firewall Log View]]></descr>

			<protocol>icmp</protocol>

			<icmptype>echoreq</icmptype>

			<source>

				<address>10.10.105.6</address>

			</source>

			<destination>

				<address>10.10.105.1</address>

			</destination>

			<created>

				<time>1446046856</time>

				<username>Easy Rule</username>

			</created>

		</rule>

		<rule>

			<id/>

			<tracker>1446048032</tracker>

			<type>pass</type>

			<interface>enc0</interface>

			<ipprotocol>inet</ipprotocol>

			<tag/>

			<tagged/>

			<max/>

			<max-src-nodes/>

			<max-src-conn/>

			<max-src-states/>

			<statetimeout/>

			<statetype>keep state</statetype>

			<os/>

			<source>

				<address>10.10.100.0/24</address>

			</source>

			<destination>

				<any/>

			</destination>

			<descr><![CDATA[CMN to CMN-OLD]]></descr>

			<created>

				<time>1446044588</time>

				<username>Easy Rule</username>

			</created>

			<updated>

				<time>1446101866</time>

				<username>admin@192.168.0.19</username>

			</updated>

		</rule>

		<rule>

			<id/>

			<tracker>1446048756</tracker>

			<type>pass</type>

			<interface>enc0</interface>

			<ipprotocol>inet</ipprotocol>

			<tag/>

			<tagged/>

			<max/>

			<max-src-nodes/>

			<max-src-conn/>

			<max-src-states/>

			<statetimeout/>

			<statetype>keep state</statetype>

			<os/>

			<source>

				<any/>

			</source>

			<destination>

				<any/>

			</destination>

			<descr><![CDATA[ALL to CT100-OLD]]></descr>

			<created>

				<time>1446048756</time>

				<username>admin@192.168.0.19</username>

			</created>

			<updated>

				<time>1446101876</time>

				<username>admin@192.168.0.19</username>

			</updated>

		</rule>

	</filter>

	<shaper/>

	<ipsec>

		<enable/>

		<phase1>

			<ikeid>1</ikeid>

			<iketype>ikev1</iketype>

			<mode>aggressive</mode>

			<interface>wan</interface>

			<remote-gateway>185.74.183.110</remote-gateway>

			<protocol>inet</protocol>

			<myid_type>dyn_dns</myid_type>

			<myid_data>kx-old-fw1.spdns.de</myid_data>

			<peerid_type>peeraddress</peerid_type>

			<peerid_data/>

			<encryption-algorithm>

				<name>3des</name>

			</encryption-algorithm>

			<hash-algorithm>sha1</hash-algorithm>

			<dhgroup>2</dhgroup>

			<lifetime>3600</lifetime>

			<pre-shared-key>XXX</pre-shared-key>

			<private-key/>

			<certref/>

			<caref/>

			<authentication_method>pre_shared_key</authentication_method>

			<descr><![CDATA[kx-olb-fw1]]></descr>

			<nat_traversal>on</nat_traversal>

			<mobike>off</mobike>

			<dpd_delay>10</dpd_delay>

			<dpd_maxfail>5</dpd_maxfail>

		</phase1>

		<uniqueids>yes</uniqueids>

		<client/>

		<phase2>

			<ikeid>1</ikeid>

			<uniqid>5627764f75cdc</uniqid>

			<mode>tunnel</mode>

			<reqid>1</reqid>

			<localid>

				<type>lan</type>

			</localid>

			<remoteid>

				<type>network</type>

				<address>10.10.100.0</address>

				<netbits>24</netbits>

			</remoteid>

			<protocol>esp</protocol>

			<encryption-algorithm-option>

				<name>aes</name>

				<keylen>auto</keylen>

			</encryption-algorithm-option>

			<hash-algorithm-option>hmac_sha1</hash-algorithm-option>

			<pfsgroup>5</pfsgroup>

			<lifetime>3600</lifetime>

			<pinghost>10.10.100.10</pinghost>

			<descr><![CDATA[CMN]]></descr>

		</phase2>

		<phase2>

			<ikeid>1</ikeid>

			<uniqid>562e1347a0c60</uniqid>

			<mode>tunnel</mode>

			<reqid>2</reqid>

			<localid>

				<type>opt1</type>

			</localid>

			<remoteid>

				<type>network</type>

				<address>0.0.0.0</address>

				<netbits>0</netbits>

			</remoteid>

			<protocol>esp</protocol>

			<encryption-algorithm-option>

				<name>aes</name>

				<keylen>auto</keylen>

			</encryption-algorithm-option>

			<hash-algorithm-option>hmac_sha1</hash-algorithm-option>

			<pfsgroup>0</pfsgroup>

			<lifetime>3600</lifetime>

			<pinghost/>

			<descr/>

		</phase2>

	</ipsec>

	<aliases>

		<alias>

			<name>EasyRuleBlockHostsWAN</name>

			<type>network</type>

			<descr><![CDATA[Hosts blocked from Firewall Log view]]></descr>

			<address>185.74.180.185/32</address>

			<detail><![CDATA[Entry added Wed, 28 Oct 2015 17:08:28 +0100||]]></detail>

		</alias>

	</aliases>

	<proxyarp/>

	<cron>

		<item>

			<minute>1,31</minute>

			<hour>0-5</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 adjkerntz -a</command>

		</item>

		<item>

			<minute>1</minute>

			<hour>3</hour>

			<mday>1</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>

		</item>

		<item>

			<minute>*/60</minute>

			<hour>*</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>

		</item>

		<item>

			<minute>*/60</minute>

			<hour>*</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>

		</item>

		<item>

			<minute>1</minute>

			<hour>1</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>

		</item>

		<item>

			<minute>*/60</minute>

			<hour>*</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>

		</item>

		<item>

			<minute>30</minute>

			<hour>12</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>

		</item>

	</cron>

	<wol/>

	<rrd>

		<enable/>

	</rrd>

	<load_balancer>

		<monitor_type>

			<name>ICMP</name>

			<type>icmp</type>

			<descr><![CDATA[ICMP]]></descr>

			<options/>

		</monitor_type>

		<monitor_type>

			<name>TCP</name>

			<type>tcp</type>

			<descr><![CDATA[Generic TCP]]></descr>

			<options/>

		</monitor_type>

		<monitor_type>

			<name>HTTP</name>

			<type>http</type>

			<descr><![CDATA[Generic HTTP]]></descr>

			<options>

				<path>/</path>

				<host/>

				<code>200</code>

			</options>

		</monitor_type>

		<monitor_type>

			<name>HTTPS</name>

			<type>https</type>

			<descr><![CDATA[Generic HTTPS]]></descr>

			<options>

				<path>/</path>

				<host/>

				<code>200</code>

			</options>

		</monitor_type>

		<monitor_type>

			<name>SMTP</name>

			<type>send</type>

			<descr><![CDATA[Generic SMTP]]></descr>

			<options>

				<send/>

				<expect>220 *</expect>

			</options>

		</monitor_type>

	</load_balancer>

	<widgets>

		<sequence>system_information-container:col1:show,captive_portal_status-container:col1:close,carp_status-container:col1:close,cpu_graphs-container:col1:close,gateways-container:col1:close,gmirror_status-container:col1:close,installed_packages-container:col1:close,interface_statistics-container:col1:close,interfaces-container:col2:show,ipsec-container:col2:close,load_balancer_status-container:col2:close,log-container:col2:close,picture-container:col2:close,rss-container:col2:close,services_status-container:col2:close,traffic_graphs-container:col2:close</sequence>

	</widgets>

	<openvpn/>

	<dnshaper/>

	<unbound>

		<enable/>

		<dnssec/>

		<active_interface>all</active_interface>

		<outgoing_interface/>

		<custom_options/>

		<hideidentity/>

		<hideversion/>

		<dnssecstripped/>

		<regdhcp/>

	</unbound>

	<revision>

		<time>1446104056</time>

		<description><![CDATA[admin@10.10.105.6: /interfaces.php made unknown change]]></description>

		<username>admin@10.10.105.6</username>

	</revision>

	<dhcpdv6/>

	<cert>

		<refid>561b9dd7e98c9</refid>

		<descr><![CDATA[webConfigurator default (561b9dd7e98c9)]]></descr>

		<type>server</type>

		<crt>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</crt>

		<prv>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</prv>

	</cert>

	<ppps>

	</ppps>

	<gateways>

		<gateway_item>

			<interface>wan</interface>

			<gateway>dynamic</gateway>

			<name>WAN_DHCP</name>

			<weight>1</weight>

			<ipprotocol>inet</ipprotocol>

			<interval/>

			<avg_delay_samples/>

			<avg_loss_samples/>

			<avg_loss_delay_samples/>

			<descr><![CDATA[Interface WAN_DHCP Gateway]]></descr>

			<defaultgw/>

		</gateway_item>

	</gateways>

	<notifications>

		<growl>

			<ipaddress>admin</ipaddress>

			<password>XXX</password>

			<name>PHP-Growl</name>

			<notification_name>pfSense growl alert</notification_name>

			<disable/>

		</growl>

		<smtp>

			<ipaddress/>

			<port/>

			<notifyemailaddress/>

			<username/>

			<password/>

			<authentication_mechanism>PLAIN</authentication_mechanism>

			<fromaddress/>

		</smtp>

	</notifications>

	<installedpackages>

		<quaggaospfdinterfaces>

			<config>

				<interface>lan</interface>

				<metric/>

				<interfacearea/>

				<descr/>

				<passive/>

				<acceptfilter/>

				<md5password/>

				<password/>

				<routerpriorityelections/>

				<hellointervalinseconds/>

				<retransmitinterval/>

				<deadtimer/>

			</config>

			<config>

				<interface>wan</interface>

				<metric/>

				<interfacearea/>

				<descr/>

				<passive/>

				<acceptfilter/>

				<md5password/>

				<password/>

				<routerpriorityelections/>

				<hellointervalinseconds/>

				<retransmitinterval/>

				<deadtimer/>

			</config>

		</quaggaospfdinterfaces>

		<quaggaospfd>

			<config>

				<password>XXX</password>

				<logging/>

				<adjacencylog/>

				<routerid/>

				<area>0.0.0.0</area>

				<updatefib/>

				<redistributeconnectedsubnets>on</redistributeconnectedsubnets>

				<redistributedefaultroute/>

				<redistributestatic>on</redistributestatic>

				<redistributekernel>on</redistributekernel>

				<spfholdtime/>

				<spfdelay/>

				<rfc1583/>

				<row>

					<routevalue>185.74.183.110/32</routevalue>

					<routearea>0.0.0.0</routearea>

				</row>

				<carpstatusip/>

			</config>

		</quaggaospfd>

	</installedpackages>

	<dyndnses>

		<dyndns>

			<type>custom</type>

			<username>kx-old-fw1.spdns.de</username>

			<password>XXX</password>

			<host>kx-old-fw1.spdns.de</host>

			<mx/>

			<enable/>

			<interface>wan</interface>

			<zoneid/>

			<ttl/>

			<updateurl>https://update.spdns.de/nic/update?hostname=kx-old-fw1.spdns.de&amp;myip=%IP%</updateurl>

			<resultmatch/>

			<requestif>wan</requestif>

			<descr/>

			<id>0</id>

		</dyndns>

	</dyndnses>

	<ntpd>

		<interface>wan</interface>

		<gps>

			<type>Default</type>

		</gps>

	</ntpd>

	<vlans>

		<vlan>

			<if>rl1</if>

			<tag>100</tag>

			<descr><![CDATA[CT-100]]></descr>

			<vlanif>rl1_vlan100</vlanif>

		</vlan>

		<vlan>

			<if>rl1</if>

			<tag>2</tag>

			<descr><![CDATA[VLAN2]]></descr>

			<vlanif>rl1_vlan2</vlanif>

		</vlan>

		<vlan>

			<if>rl1</if>

			<tag>3</tag>

			<descr><![CDATA[VLAN3]]></descr>

			<vlanif>rl1_vlan3</vlanif>

		</vlan>

	</vlans>

	<bridges>

		<bridged>

			<members>lan,opt2</members>

			<descr><![CDATA[CMN]]></descr>

			<maxaddr/>

			<timeout/>

			<maxage/>

			<fwdelay/>

			<hellotime/>

			<priority/>

			<proto>rstp</proto>

			<holdcnt/>

			<ifpriority/>

			<ifpathcost/>

			<bridgeif>bridge0</bridgeif>

		</bridged>

	</bridges>

</pfsense>