Project

General

Profile

Bug #729 » config-trinity.linuxgeneration.org-20100817215608.xml

My config - Jon Bruce, 08/17/2010 09:59 PM

 
1
<?xml version="1.0"?>
2
<pfsense>
3
	<version>6.4</version>
4
	<lastchange/>
5
	<theme>pfsense_ng</theme>
6
	<sysctl>
7
		<item>
8
			<desc>Set the ephemeral port range to be lower.</desc>
9
			<tunable>net.inet.ip.portrange.first</tunable>
10
			<value>default</value>
11
		</item>
12
		<item>
13
			<desc>Drop packets to closed TCP ports without returning a RST</desc>
14
			<tunable>net.inet.tcp.blackhole</tunable>
15
			<value>default</value>
16
		</item>
17
		<item>
18
			<desc>Do not send ICMP port unreachable messages for closed UDP ports</desc>
19
			<tunable>net.inet.udp.blackhole</tunable>
20
			<value>default</value>
21
		</item>
22
		<item>
23
			<desc>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</desc>
24
			<tunable>net.inet.ip.random_id</tunable>
25
			<value>default</value>
26
		</item>
27
		<item>
28
			<desc>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</desc>
29
			<tunable>net.inet.tcp.drop_synfin</tunable>
30
			<value>default</value>
31
		</item>
32
		<item>
33
			<desc>Enable sending IPv4 redirects</desc>
34
			<tunable>net.inet.ip.redirect</tunable>
35
			<value>default</value>
36
		</item>
37
		<item>
38
			<desc>Enable sending IPv6 redirects</desc>
39
			<tunable>net.inet6.ip6.redirect</tunable>
40
			<value>default</value>
41
		</item>
42
		<item>
43
			<desc>Generate SYN cookies for outbound SYN-ACK packets</desc>
44
			<tunable>net.inet.tcp.syncookies</tunable>
45
			<value>default</value>
46
		</item>
47
		<item>
48
			<desc>Maximum incoming/outgoing TCP datagram size (receive)</desc>
49
			<tunable>net.inet.tcp.recvspace</tunable>
50
			<value>default</value>
51
		</item>
52
		<item>
53
			<desc>Maximum incoming/outgoing TCP datagram size (send)</desc>
54
			<tunable>net.inet.tcp.sendspace</tunable>
55
			<value>default</value>
56
		</item>
57
		<item>
58
			<desc>IP Fastforwarding</desc>
59
			<tunable>net.inet.ip.fastforwarding</tunable>
60
			<value>default</value>
61
		</item>
62
		<item>
63
			<desc>Do not delay ACK to try and piggyback it onto a data packet</desc>
64
			<tunable>net.inet.tcp.delayed_ack</tunable>
65
			<value>default</value>
66
		</item>
67
		<item>
68
			<desc>Maximum outgoing UDP datagram size</desc>
69
			<tunable>net.inet.udp.maxdgram</tunable>
70
			<value>default</value>
71
		</item>
72
		<item>
73
			<desc>Handling of non-IP packets which are not passed to pfil (see if_bridge(4))</desc>
74
			<tunable>net.link.bridge.pfil_onlyip</tunable>
75
			<value>default</value>
76
		</item>
77
		<item>
78
			<desc>Set to 0 to disable filtering on the incoming and outgoing member interfaces.</desc>
79
			<tunable>net.link.bridge.pfil_member</tunable>
80
			<value>default</value>
81
		</item>
82
		<item>
83
			<desc>Set to 1 to enable filtering on the bridge interface</desc>
84
			<tunable>net.link.bridge.pfil_bridge</tunable>
85
			<value>default</value>
86
		</item>
87
		<item>
88
			<desc>Allow unprivileged access to tap(4) device nodes</desc>
89
			<tunable>net.link.tap.user_open</tunable>
90
			<value>default</value>
91
		</item>
92
		<item>
93
			<desc>Verbosity of the rndtest driver (0: do not display results on console)</desc>
94
			<tunable>kern.rndtest.verbose</tunable>
95
			<value>default</value>
96
		</item>
97
		<item>
98
			<desc>Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())</desc>
99
			<tunable>kern.randompid</tunable>
100
			<value>default</value>
101
		</item>
102
		<item>
103
			<desc>Maximum size of the IP input queue</desc>
104
			<tunable>net.inet.ip.intr_queue_maxlen</tunable>
105
			<value>default</value>
106
		</item>
107
		<item>
108
			<desc>Disable CTRL+ALT+Delete reboot from keyboard.</desc>
109
			<tunable>hw.syscons.kbd_reboot</tunable>
110
			<value>default</value>
111
		</item>
112
		<item>
113
			<desc>Enable TCP Inflight mode</desc>
114
			<tunable>net.inet.tcp.inflight.enable</tunable>
115
			<value>default</value>
116
		</item>
117
		<item>
118
			<desc>Enable TCP extended debugging</desc>
119
			<tunable>net.inet.tcp.log_debug</tunable>
120
			<value>default</value>
121
		</item>
122
		<item>
123
			<desc>Set ICMP Limits</desc>
124
			<tunable>net.inet.icmp.icmplim</tunable>
125
			<value>default</value>
126
		</item>
127
		<item>
128
			<desc>TCP Offload Engine</desc>
129
			<tunable>net.inet.tcp.tso</tunable>
130
			<value>default</value>
131
		</item>
132
		<item>
133
			<desc>TCP Offload Engine - BCE</desc>
134
			<tunable>hw.bce.tso_enable</tunable>
135
			<value>default</value>
136
		</item>
137
	</sysctl>
138
	<system>
139
		<optimization>normal</optimization>
140
		<hostname>trinity</hostname>
141
		<domain>linuxgeneration.org</domain>
142
		<dnsserver>xx.xx.96.96</dnsserver>
143
		<dnsserver>xx.xx.97.197</dnsserver>
144
		<group>
145
			<name>all</name>
146
			<description><![CDATA[All Users]]></description>
147
			<scope>system</scope>
148
			<gid>1998</gid>
149
			<member>0</member>
150
		</group>
151
		<group>
152
			<name>admins</name>
153
			<description><![CDATA[System Administrators]]></description>
154
			<scope>system</scope>
155
			<gid>1999</gid>
156
			<member>0</member>
157
			<priv>page-all</priv>
158
		</group>
159
		<user>
160
			<name>admin</name>
161
			<fullname>System Administrator</fullname>
162
			<scope>system</scope>
163
			<groupname>admins</groupname>
164
			<password>$1$npc9nbee$rkvFUu.ITQLY6IBSPI8Sn.</password>
165
			<uid>0</uid>
166
			<priv>user-shell-access</priv>
167
			<md5-hash>7146e8eed5f124f82c356a009baa4358</md5-hash>
168
			<nt-hash>912e596a04842da10f606f773db1cf9e</nt-hash>
169
		</user>
170
		<nextuid>2000</nextuid>
171
		<nextgid>2000</nextgid>
172
		<timezone>America/Toronto</timezone>
173
		<time-update-interval>300</time-update-interval>
174
		<timeservers>ca.pool.ntp.org</timeservers>
175
		<webgui>
176
			<protocol>https</protocol>
177
			<ssl-certref>4c67042d255a5</ssl-certref>
178
			<port/>
179
		</webgui>
180
		<disablenatreflection>yes</disablenatreflection>
181
		<disablesegmentationoffloading/>
182
		<disablelargereceiveoffloading/>
183
		<cert>
184
			<refid>4c67042d255a5</refid>
185
			<name>webConfigurator default</name>
186
			<crt>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</crt>
187
			<prv>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</prv>
188
		</cert>
189
		<firmware>
190
			<allowinvalidsig/>
191
		</firmware>
192
		<enablesshd>enabled</enablesshd>
193
		<ssh>
194
			<port>70</port>
195
		</ssh>
196
	</system>
197
	<interfaces>
198
		<wan>
199
			<enable/>
200
			<if>xl0</if>
201
			<ipaddr>xx.xx.96.62</ipaddr>
202
			<subnet>26</subnet>
203
			<gateway>xx.xx.96.1</gateway>
204
			<blockpriv>on</blockpriv>
205
			<blockbogons>on</blockbogons>
206
			<media/>
207
			<mediaopt/>
208
		</wan>
209
		<lan>
210
			<enable/>
211
			<if>xl2</if>
212
			<ipaddr>192.168.174.1</ipaddr>
213
			<subnet>24</subnet>
214
			<media/>
215
			<mediaopt/>
216
		</lan>
217
		<opt1>
218
			<descr><![CDATA[Phone]]></descr>
219
			<if>nfe0</if>
220
			<spoofmac/>
221
			<enable/>
222
		</opt1>
223
		<opt2>
224
			<descr><![CDATA[WLAN]]></descr>
225
			<if>ath0</if>
226
			<wireless>
227
				<standard>11g</standard>
228
				<mode>hostap</mode>
229
				<protmode>off</protmode>
230
				<ssid>NOC4</ssid>
231
				<channel>0</channel>
232
				<authmode/>
233
				<txpower>99</txpower>
234
				<distance/>
235
				<regdomain/>
236
				<regcountry/>
237
				<reglocation/>
238
				<wpa>
239
					<macaddr_acl/>
240
					<auth_algs>1</auth_algs>
241
					<wpa_mode>2</wpa_mode>
242
					<wpa_key_mgmt>WPA-PSK</wpa_key_mgmt>
243
					<wpa_pairwise>CCMP</wpa_pairwise>
244
					<wpa_group_rekey>60</wpa_group_rekey>
245
					<wpa_gmk_rekey>3600</wpa_gmk_rekey>
246
					<passphrase>homewireless4</passphrase>
247
					<ext_wpa_sw/>
248
					<enable/>
249
				</wpa>
250
				<auth_server_addr/>
251
				<auth_server_port/>
252
				<auth_server_shared_secret/>
253
				<wep/>
254
			</wireless>
255
			<spoofmac/>
256
		</opt2>
257
		<opt3>
258
			<descr><![CDATA[WAN2]]></descr>
259
			<if>xl1</if>
260
			<ipaddr>dhcp</ipaddr>
261
			<dhcphostname/>
262
			<alias-address/>
263
			<alias-subnet>32</alias-subnet>
264
			<spoofmac/>
265
		</opt3>
266
		<opt4>
267
			<descr><![CDATA[PhoneBridge]]></descr>
268
			<if>bridge0</if>
269
			<spoofmac/>
270
			<enable/>
271
		</opt4>
272
		<opt5>
273
			<descr><![CDATA[WLANBridge]]></descr>
274
			<if>bridge1</if>
275
			<spoofmac/>
276
		</opt5>
277
	</interfaces>
278
	<staticroutes/>
279
	<dhcpd>
280
		<lan>
281
			<enable/>
282
			<range>
283
				<from>192.168.174.100</from>
284
				<to>192.168.174.199</to>
285
			</range>
286
			<defaultleasetime/>
287
			<maxleasetime/>
288
			<netmask/>
289
			<failover_peerip/>
290
			<dnsserver>xx.xx.96.96</dnsserver>
291
			<dnsserver>xx.xx.97.197</dnsserver>
292
			<gateway/>
293
			<domain/>
294
			<domainsearchlist/>
295
			<ddnsdomain/>
296
			<ntpserver>xx.xx.96.96</ntpserver>
297
			<ntpserver>xx.xx.96.70</ntpserver>
298
			<tftp/>
299
			<ldap/>
300
			<next-server/>
301
			<filename/>
302
			<rootpath/>
303
			<numberoptions/>
304
		</lan>
305
	</dhcpd>
306
	<pptpd>
307
		<mode/>
308
		<redir/>
309
		<localip/>
310
		<remoteip/>
311
	</pptpd>
312
	<ovpn/>
313
	<dnsmasq>
314
		<enable/>
315
	</dnsmasq>
316
	<snmpd>
317
		<syslocation/>
318
		<syscontact/>
319
		<rocommunity>public</rocommunity>
320
	</snmpd>
321
	<diag>
322
		<ipv6nat>
323
			<ipaddr/>
324
		</ipv6nat>
325
	</diag>
326
	<bridge/>
327
	<syslog>
328
		<reverse/>
329
		<nentries>50</nentries>
330
	</syslog>
331
	<nat>
332
		<ipsecpassthru>
333
			<enable/>
334
		</ipsecpassthru>
335
		<advancedoutbound/>
336
		<rule>
337
			<source>
338
				<any/>
339
			</source>
340
			<destination>
341
				<network>wanip</network>
342
				<port>22</port>
343
			</destination>
344
			<protocol>tcp</protocol>
345
			<target>192.168.174.10</target>
346
			<local-port>22</local-port>
347
			<interface>wan</interface>
348
			<descr><![CDATA[SSH to Keri]]></descr>
349
			<associated-rule-id>nat_4c69c414c908c3.81582129</associated-rule-id>
350
		</rule>
351
		<rule>
352
			<source>
353
				<any/>
354
			</source>
355
			<destination>
356
				<network>wanip</network>
357
				<port>5000</port>
358
			</destination>
359
			<protocol>tcp</protocol>
360
			<target>192.168.174.10</target>
361
			<local-port>5000</local-port>
362
			<interface>wan</interface>
363
			<descr><![CDATA[Adrilanna]]></descr>
364
			<associated-rule-id>nat_4c69c4360882c4.63103338</associated-rule-id>
365
		</rule>
366
		<rule>
367
			<source>
368
				<any/>
369
			</source>
370
			<destination>
371
				<network>wanip</network>
372
				<port>26484</port>
373
			</destination>
374
			<protocol>tcp/udp</protocol>
375
			<target>192.168.174.10</target>
376
			<local-port>26484</local-port>
377
			<interface>wan</interface>
378
			<descr><![CDATA[Torrent to Keri]]></descr>
379
			<associated-rule-id>nat_4c69c476d0b174.53157377</associated-rule-id>
380
		</rule>
381
	</nat>
382
	<filter>
383
		<rule>
384
			<id/>
385
			<type>pass</type>
386
			<interface>wan</interface>
387
			<max/>
388
			<max-src-nodes/>
389
			<max-src-conn/>
390
			<max-src-states/>
391
			<statetimeout/>
392
			<statetype>keep state</statetype>
393
			<os/>
394
			<source>
395
				<address>xx.xx.96.82</address>
396
			</source>
397
			<destination>
398
				<address>xx.xx.96.41</address>
399
			</destination>
400
			<descr><![CDATA[VoIP Phone]]></descr>
401
		</rule>
402
		<rule>
403
			<source>
404
				<any/>
405
			</source>
406
			<interface>wan</interface>
407
			<protocol>tcp</protocol>
408
			<destination>
409
				<address>192.168.174.10</address>
410
				<port>22</port>
411
			</destination>
412
			<descr><![CDATA[NAT SSH to Keri]]></descr>
413
			<associated-rule-id>nat_4c69c414c908c3.81582129</associated-rule-id>
414
		</rule>
415
		<rule>
416
			<source>
417
				<any/>
418
			</source>
419
			<interface>wan</interface>
420
			<protocol>tcp</protocol>
421
			<destination>
422
				<address>192.168.174.10</address>
423
				<port>5000</port>
424
			</destination>
425
			<descr><![CDATA[NAT Adrilanna]]></descr>
426
			<associated-rule-id>nat_4c69c4360882c4.63103338</associated-rule-id>
427
		</rule>
428
		<rule>
429
			<source>
430
				<any/>
431
			</source>
432
			<interface>wan</interface>
433
			<protocol>tcp/udp</protocol>
434
			<destination>
435
				<address>192.168.174.10</address>
436
				<port>26484</port>
437
			</destination>
438
			<descr><![CDATA[NAT Torrent to Keri]]></descr>
439
			<associated-rule-id>nat_4c69c476d0b174.53157377</associated-rule-id>
440
		</rule>
441
		<rule>
442
			<id/>
443
			<type>pass</type>
444
			<interface>opt1</interface>
445
			<max/>
446
			<max-src-nodes/>
447
			<max-src-conn/>
448
			<max-src-states/>
449
			<statetimeout/>
450
			<statetype>keep state</statetype>
451
			<os/>
452
			<source>
453
				<address>xx.xx.96.41</address>
454
			</source>
455
			<destination>
456
				<address>xx.xx.96.82</address>
457
			</destination>
458
			<descr><![CDATA[VoIP Phone]]></descr>
459
		</rule>
460
		<rule>
461
			<id/>
462
			<type>block</type>
463
			<interface>lan</interface>
464
			<max/>
465
			<max-src-nodes/>
466
			<max-src-conn/>
467
			<max-src-states/>
468
			<statetimeout/>
469
			<statetype>keep state</statetype>
470
			<os/>
471
			<protocol>tcp/udp</protocol>
472
			<source>
473
				<any/>
474
			</source>
475
			<destination>
476
				<any/>
477
				<port>137-139</port>
478
			</destination>
479
			<descr><![CDATA[Drop NetBIOS]]></descr>
480
		</rule>
481
		<rule>
482
			<id/>
483
			<type>block</type>
484
			<interface>lan</interface>
485
			<max/>
486
			<max-src-nodes/>
487
			<max-src-conn/>
488
			<max-src-states/>
489
			<statetimeout/>
490
			<statetype>keep state</statetype>
491
			<os/>
492
			<protocol>tcp/udp</protocol>
493
			<source>
494
				<any/>
495
			</source>
496
			<destination>
497
				<any/>
498
				<port>445</port>
499
			</destination>
500
			<descr><![CDATA[Drop MS DS]]></descr>
501
		</rule>
502
		<rule>
503
			<type>pass</type>
504
			<descr><![CDATA[Default allow LAN to any rule]]></descr>
505
			<interface>lan</interface>
506
			<source>
507
				<network>lan</network>
508
			</source>
509
			<destination>
510
				<any/>
511
			</destination>
512
		</rule>
513
		<rule>
514
			<descr><![CDATA[VOIP Adapter]]></descr>
515
			<direction>out</direction>
516
			<protocol>udp</protocol>
517
			<defaultqueue>qVoIP</defaultqueue>
518
			<source>
519
				<address>xx.xx.96.41</address>
520
			</source>
521
			<destination>
522
				<any/>
523
			</destination>
524
			<floating>yes</floating>
525
			<wizard>yes</wizard>
526
			<enabled>on</enabled>
527
		</rule>
528
		<rule>
529
			<defaultqueue>qP2P</defaultqueue>
530
			<direction>out</direction>
531
			<source>
532
				<any/>
533
			</source>
534
			<destination>
535
				<any/>
536
				<port>7668-7668</port>
537
			</destination>
538
			<descr><![CDATA[m_P2P Aimster outbound]]></descr>
539
			<floating>yes</floating>
540
			<wizard>yes</wizard>
541
			<protocol>tcp</protocol>
542
		</rule>
543
		<rule>
544
			<defaultqueue>qP2P</defaultqueue>
545
			<direction>out</direction>
546
			<source>
547
				<any/>
548
			</source>
549
			<destination>
550
				<any/>
551
				<port>6881-6999</port>
552
			</destination>
553
			<descr><![CDATA[m_P2P BitTorrent outbound]]></descr>
554
			<floating>yes</floating>
555
			<wizard>yes</wizard>
556
			<protocol>tcp</protocol>
557
		</rule>
558
		<rule>
559
			<defaultqueue>qP2P</defaultqueue>
560
			<direction>out</direction>
561
			<source>
562
				<any/>
563
			</source>
564
			<destination>
565
				<any/>
566
				<port>6881-6999</port>
567
			</destination>
568
			<descr><![CDATA[m_P2P BitTorrent outbound]]></descr>
569
			<floating>yes</floating>
570
			<wizard>yes</wizard>
571
			<protocol>udp</protocol>
572
		</rule>
573
		<rule>
574
			<defaultqueue>qP2P</defaultqueue>
575
			<direction>out</direction>
576
			<source>
577
				<any/>
578
			</source>
579
			<destination>
580
				<any/>
581
				<port>7788-7788</port>
582
			</destination>
583
			<descr><![CDATA[m_P2P BuddyShare outbound]]></descr>
584
			<floating>yes</floating>
585
			<wizard>yes</wizard>
586
			<protocol>tcp</protocol>
587
		</rule>
588
		<rule>
589
			<defaultqueue>qP2P</defaultqueue>
590
			<direction>out</direction>
591
			<source>
592
				<any/>
593
			</source>
594
			<destination>
595
				<any/>
596
				<port>2340-2340</port>
597
			</destination>
598
			<descr><![CDATA[m_P2P CuteMX outbound]]></descr>
599
			<floating>yes</floating>
600
			<wizard>yes</wizard>
601
			<protocol>tcp</protocol>
602
		</rule>
603
		<rule>
604
			<defaultqueue>qP2P</defaultqueue>
605
			<direction>out</direction>
606
			<source>
607
				<any/>
608
			</source>
609
			<destination>
610
				<any/>
611
				<port>6666-6668</port>
612
			</destination>
613
			<descr><![CDATA[m_P2P dcc outbound]]></descr>
614
			<floating>yes</floating>
615
			<wizard>yes</wizard>
616
			<protocol>tcp</protocol>
617
		</rule>
618
		<rule>
619
			<defaultqueue>qP2P</defaultqueue>
620
			<direction>out</direction>
621
			<source>
622
				<any/>
623
			</source>
624
			<destination>
625
				<any/>
626
				<port>412-412</port>
627
			</destination>
628
			<descr><![CDATA[m_P2P DirectConnect outbound]]></descr>
629
			<floating>yes</floating>
630
			<wizard>yes</wizard>
631
			<protocol>tcp</protocol>
632
		</rule>
633
		<rule>
634
			<defaultqueue>qP2P</defaultqueue>
635
			<direction>out</direction>
636
			<source>
637
				<any/>
638
			</source>
639
			<destination>
640
				<any/>
641
				<port>1044-1045</port>
642
			</destination>
643
			<descr><![CDATA[m_P2P DirectFileExpress outbound]]></descr>
644
			<floating>yes</floating>
645
			<wizard>yes</wizard>
646
			<protocol>tcp</protocol>
647
		</rule>
648
		<rule>
649
			<defaultqueue>qP2P</defaultqueue>
650
			<direction>out</direction>
651
			<source>
652
				<any/>
653
			</source>
654
			<destination>
655
				<any/>
656
				<port>4661-4665</port>
657
			</destination>
658
			<descr><![CDATA[m_P2P EDonkey2000 outbound]]></descr>
659
			<floating>yes</floating>
660
			<wizard>yes</wizard>
661
			<protocol>tcp</protocol>
662
		</rule>
663
		<rule>
664
			<defaultqueue>qP2P</defaultqueue>
665
			<direction>out</direction>
666
			<source>
667
				<any/>
668
			</source>
669
			<destination>
670
				<any/>
671
				<port>6346-6346</port>
672
			</destination>
673
			<descr><![CDATA[m_P2P Gnutella-TCP outbound]]></descr>
674
			<floating>yes</floating>
675
			<wizard>yes</wizard>
676
			<protocol>tcp</protocol>
677
		</rule>
678
		<rule>
679
			<defaultqueue>qP2P</defaultqueue>
680
			<direction>out</direction>
681
			<source>
682
				<any/>
683
			</source>
684
			<destination>
685
				<any/>
686
				<port>6346-6346</port>
687
			</destination>
688
			<descr><![CDATA[m_P2P Gnutella-UDP outbound]]></descr>
689
			<floating>yes</floating>
690
			<wizard>yes</wizard>
691
			<protocol>udp</protocol>
692
		</rule>
693
		<rule>
694
			<defaultqueue>qP2P</defaultqueue>
695
			<direction>out</direction>
696
			<source>
697
				<any/>
698
			</source>
699
			<destination>
700
				<any/>
701
				<port>8038-8039</port>
702
			</destination>
703
			<descr><![CDATA[m_P2P grouper outbound]]></descr>
704
			<floating>yes</floating>
705
			<wizard>yes</wizard>
706
			<protocol>tcp</protocol>
707
		</rule>
708
		<rule>
709
			<defaultqueue>qP2P</defaultqueue>
710
			<direction>out</direction>
711
			<source>
712
				<any/>
713
			</source>
714
			<destination>
715
				<any/>
716
				<port>28864-28865</port>
717
			</destination>
718
			<descr><![CDATA[m_P2P hotComm outbound]]></descr>
719
			<floating>yes</floating>
720
			<wizard>yes</wizard>
721
			<protocol>tcp</protocol>
722
		</rule>
723
		<rule>
724
			<defaultqueue>qP2P</defaultqueue>
725
			<direction>out</direction>
726
			<source>
727
				<any/>
728
			</source>
729
			<destination>
730
				<any/>
731
				<port>5500-5503</port>
732
			</destination>
733
			<descr><![CDATA[m_P2P HotlineConnect outbound]]></descr>
734
			<floating>yes</floating>
735
			<wizard>yes</wizard>
736
			<protocol>tcp</protocol>
737
		</rule>
738
		<rule>
739
			<defaultqueue>qP2P</defaultqueue>
740
			<direction>out</direction>
741
			<source>
742
				<any/>
743
			</source>
744
			<destination>
745
				<any/>
746
				<port>4329-4329</port>
747
			</destination>
748
			<descr><![CDATA[m_P2P iMesh outbound]]></descr>
749
			<floating>yes</floating>
750
			<wizard>yes</wizard>
751
			<protocol>tcp</protocol>
752
		</rule>
753
		<rule>
754
			<defaultqueue>qP2P</defaultqueue>
755
			<direction>out</direction>
756
			<source>
757
				<any/>
758
			</source>
759
			<destination>
760
				<any/>
761
				<port>6699-6701</port>
762
			</destination>
763
			<descr><![CDATA[m_P2P Napster outbound]]></descr>
764
			<floating>yes</floating>
765
			<wizard>yes</wizard>
766
			<protocol>tcp</protocol>
767
		</rule>
768
		<rule>
769
			<defaultqueue>qP2P</defaultqueue>
770
			<direction>out</direction>
771
			<source>
772
				<any/>
773
			</source>
774
			<destination>
775
				<any/>
776
				<port>8888-8889</port>
777
			</destination>
778
			<descr><![CDATA[m_P2P OpenNap outbound]]></descr>
779
			<floating>yes</floating>
780
			<wizard>yes</wizard>
781
			<protocol>tcp</protocol>
782
		</rule>
783
		<rule>
784
			<defaultqueue>qP2P</defaultqueue>
785
			<direction>out</direction>
786
			<source>
787
				<any/>
788
			</source>
789
			<destination>
790
				<any/>
791
				<port>8311-8311</port>
792
			</destination>
793
			<descr><![CDATA[m_P2P Scour outbound]]></descr>
794
			<floating>yes</floating>
795
			<wizard>yes</wizard>
796
			<protocol>tcp</protocol>
797
		</rule>
798
		<rule>
799
			<defaultqueue>qP2P</defaultqueue>
800
			<direction>out</direction>
801
			<source>
802
				<any/>
803
			</source>
804
			<destination>
805
				<any/>
806
				<port>6346-6346</port>
807
			</destination>
808
			<descr><![CDATA[m_P2P Shareaza outbound]]></descr>
809
			<floating>yes</floating>
810
			<wizard>yes</wizard>
811
			<protocol>tcp</protocol>
812
		</rule>
813
		<rule>
814
			<defaultqueue>qP2P</defaultqueue>
815
			<direction>out</direction>
816
			<source>
817
				<any/>
818
			</source>
819
			<destination>
820
				<any/>
821
				<port>5190-5190</port>
822
			</destination>
823
			<descr><![CDATA[m_P2P SongSpy outbound]]></descr>
824
			<floating>yes</floating>
825
			<wizard>yes</wizard>
826
			<protocol>tcp</protocol>
827
		</rule>
828
		<rule>
829
			<defaultqueue>qP2P</defaultqueue>
830
			<direction>out</direction>
831
			<source>
832
				<any/>
833
			</source>
834
			<destination>
835
				<any/>
836
				<port>6699-6699</port>
837
			</destination>
838
			<descr><![CDATA[m_P2P WinMX outbound]]></descr>
839
			<floating>yes</floating>
840
			<wizard>yes</wizard>
841
			<protocol>tcp</protocol>
842
		</rule>
843
		<rule>
844
			<defaultqueue>qGames</defaultqueue>
845
			<direction>out</direction>
846
			<source>
847
				<any/>
848
			</source>
849
			<destination>
850
				<any/>
851
				<port>27910-27919</port>
852
			</destination>
853
			<floating>yes</floating>
854
			<wizard>yes</wizard>
855
			<enabled>on</enabled>
856
			<descr><![CDATA[m_Game quakeiii outbound]]></descr>
857
			<protocol>udp</protocol>
858
		</rule>
859
		<rule>
860
			<defaultqueue>qOthersHigh</defaultqueue>
861
			<ackqueue>qACK</ackqueue>
862
			<direction>out</direction>
863
			<source>
864
				<any/>
865
			</source>
866
			<destination>
867
				<any/>
868
				<port>3389-3389</port>
869
			</destination>
870
			<floating>yes</floating>
871
			<wizard>yes</wizard>
872
			<enabled>on</enabled>
873
			<descr><![CDATA[m_Other MSRDP outbound]]></descr>
874
			<protocol>tcp</protocol>
875
		</rule>
876
		<rule>
877
			<defaultqueue>qOthersHigh</defaultqueue>
878
			<ackqueue>qACK</ackqueue>
879
			<direction>out</direction>
880
			<source>
881
				<any/>
882
			</source>
883
			<destination>
884
				<any/>
885
				<port>6667-6670</port>
886
			</destination>
887
			<floating>yes</floating>
888
			<wizard>yes</wizard>
889
			<enabled>on</enabled>
890
			<descr><![CDATA[m_Other IRC outbound]]></descr>
891
			<protocol>tcp</protocol>
892
		</rule>
893
		<rule>
894
			<defaultqueue>qOthersHigh</defaultqueue>
895
			<ackqueue>qACK</ackqueue>
896
			<direction>out</direction>
897
			<source>
898
				<any/>
899
			</source>
900
			<destination>
901
				<any/>
902
				<port>8000-8100</port>
903
			</destination>
904
			<floating>yes</floating>
905
			<wizard>yes</wizard>
906
			<enabled>on</enabled>
907
			<descr><![CDATA[m_Other STREAMINGMP3 outbound]]></descr>
908
			<protocol>tcp</protocol>
909
		</rule>
910
		<rule>
911
			<defaultqueue>qOthersHigh</defaultqueue>
912
			<ackqueue>qACK</ackqueue>
913
			<direction>out</direction>
914
			<source>
915
				<any/>
916
			</source>
917
			<destination>
918
				<any/>
919
				<port>554-554</port>
920
			</destination>
921
			<floating>yes</floating>
922
			<wizard>yes</wizard>
923
			<enabled>on</enabled>
924
			<descr><![CDATA[m_Other RTSP1 outbound]]></descr>
925
			<protocol>tcp</protocol>
926
		</rule>
927
		<rule>
928
			<defaultqueue>qOthersHigh</defaultqueue>
929
			<ackqueue>qACK</ackqueue>
930
			<direction>out</direction>
931
			<source>
932
				<any/>
933
			</source>
934
			<destination>
935
				<any/>
936
				<port>80-80</port>
937
			</destination>
938
			<floating>yes</floating>
939
			<wizard>yes</wizard>
940
			<enabled>on</enabled>
941
			<descr><![CDATA[m_Other HTTP outbound]]></descr>
942
			<protocol>tcp</protocol>
943
		</rule>
944
		<rule>
945
			<defaultqueue>qOthersHigh</defaultqueue>
946
			<ackqueue>qACK</ackqueue>
947
			<direction>out</direction>
948
			<source>
949
				<any/>
950
			</source>
951
			<destination>
952
				<any/>
953
				<port>443-443</port>
954
			</destination>
955
			<floating>yes</floating>
956
			<wizard>yes</wizard>
957
			<enabled>on</enabled>
958
			<descr><![CDATA[m_Other HTTPS outbound]]></descr>
959
			<protocol>tcp</protocol>
960
		</rule>
961
		<rule>
962
			<defaultqueue>qOthersHigh</defaultqueue>
963
			<ackqueue>qACK</ackqueue>
964
			<direction>out</direction>
965
			<source>
966
				<any/>
967
			</source>
968
			<destination>
969
				<any/>
970
				<port>25-25</port>
971
			</destination>
972
			<floating>yes</floating>
973
			<wizard>yes</wizard>
974
			<enabled>on</enabled>
975
			<descr><![CDATA[m_Other SMTP outbound]]></descr>
976
			<protocol>tcp</protocol>
977
		</rule>
978
		<rule>
979
			<defaultqueue>qOthersHigh</defaultqueue>
980
			<ackqueue>qACK</ackqueue>
981
			<direction>out</direction>
982
			<source>
983
				<any/>
984
			</source>
985
			<destination>
986
				<any/>
987
				<port>143-143</port>
988
			</destination>
989
			<floating>yes</floating>
990
			<wizard>yes</wizard>
991
			<enabled>on</enabled>
992
			<descr><![CDATA[m_Other IMAP outbound]]></descr>
993
			<protocol>tcp</protocol>
994
		</rule>
995
		<rule>
996
			<defaultqueue>qOthersHigh</defaultqueue>
997
			<ackqueue>qACK</ackqueue>
998
			<direction>out</direction>
999
			<source>
1000
				<any/>
1001
			</source>
1002
			<destination>
1003
				<any/>
1004
				<port>53-53</port>
1005
			</destination>
1006
			<floating>yes</floating>
1007
			<wizard>yes</wizard>
1008
			<enabled>on</enabled>
1009
			<descr><![CDATA[m_Other DNS1 outbound]]></descr>
1010
			<protocol>tcp</protocol>
1011
		</rule>
1012
		<rule>
1013
			<defaultqueue>qOthersHigh</defaultqueue>
1014
			<direction>out</direction>
1015
			<source>
1016
				<any/>
1017
			</source>
1018
			<destination>
1019
				<any/>
1020
				<port>53-53</port>
1021
			</destination>
1022
			<floating>yes</floating>
1023
			<wizard>yes</wizard>
1024
			<enabled>on</enabled>
1025
			<descr><![CDATA[m_Other DNS2 outbound]]></descr>
1026
			<protocol>udp</protocol>
1027
		</rule>
1028
	</filter>
1029
	<shaper>
1030
		<queue>
1031
			<interface>wan</interface>
1032
			<name>wan</name>
1033
			<scheduler>HFSC</scheduler>
1034
			<bandwidth>3500</bandwidth>
1035
			<bandwidthtype>Kb</bandwidthtype>
1036
			<enabled>on</enabled>
1037
			<queue>
1038
				<name>qACK</name>
1039
				<interface>wan</interface>
1040
				<priority>6</priority>
1041
				<bandwidth>19.818</bandwidth>
1042
				<bandwidthtype>%</bandwidthtype>
1043
				<enabled>on</enabled>
1044
				<ecn>on</ecn>
1045
				<linkshare1>0b</linkshare1>
1046
				<linkshare2>100</linkshare2>
1047
				<linkshare>on</linkshare>
1048
				<linkshare3>19.818%</linkshare3>
1049
			</queue>
1050
			<queue>
1051
				<name>qDefault</name>
1052
				<interface>wan</interface>
1053
				<priority>3</priority>
1054
				<bandwidth>9.909</bandwidth>
1055
				<bandwidthtype>%</bandwidthtype>
1056
				<enabled>on</enabled>
1057
				<default>on</default>
1058
				<ecn>on</ecn>
1059
			</queue>
1060
			<queue>
1061
				<name>qP2P</name>
1062
				<interface>wan</interface>
1063
				<priority>1</priority>
1064
				<bandwidth>4.9545</bandwidth>
1065
				<bandwidthtype>%</bandwidthtype>
1066
				<enabled>on</enabled>
1067
				<ecn>on</ecn>
1068
				<linkshare1>4.9545%</linkshare1>
1069
				<linkshare2>300</linkshare2>
1070
				<linkshare>on</linkshare>
1071
				<linkshare3>4.9545%</linkshare3>
1072
				<upperlimit3>4.9545%</upperlimit3>
1073
				<upperlimit>on</upperlimit>
1074
			</queue>
1075
			<queue>
1076
				<name>qVoIP</name>
1077
				<interface>wan</interface>
1078
				<priority>7</priority>
1079
				<bandwidth>32</bandwidth>
1080
				<bandwidthtype>Kb</bandwidthtype>
1081
				<enabled>on</enabled>
1082
				<ecn>on</ecn>
1083
				<realtime1>0b</realtime1>
1084
				<realtime2>10</realtime2>
1085
				<realtime>on</realtime>
1086
				<realtime3>92Kb</realtime3>
1087
			</queue>
1088
			<queue>
1089
				<name>qGames</name>
1090
				<interface>wan</interface>
1091
				<priority>5</priority>
1092
				<bandwidth>19.818</bandwidth>
1093
				<bandwidthtype>%</bandwidthtype>
1094
				<enabled>on</enabled>
1095
				<ecn>on</ecn>
1096
				<linkshare1>0b</linkshare1>
1097
				<linkshare2>50</linkshare2>
1098
				<linkshare>on</linkshare>
1099
				<linkshare3>19.818%</linkshare3>
1100
			</queue>
1101
			<queue>
1102
				<name>qOthersHigh</name>
1103
				<interface>wan</interface>
1104
				<priority>4</priority>
1105
				<bandwidth>9.909</bandwidth>
1106
				<bandwidthtype>%</bandwidthtype>
1107
				<enabled>on</enabled>
1108
				<ecn>on</ecn>
1109
				<linkshare1>0b</linkshare1>
1110
				<linkshare2>200</linkshare2>
1111
				<linkshare>on</linkshare>
1112
				<linkshare3>9.909%</linkshare3>
1113
			</queue>
1114
			<queue>
1115
				<name>qOthersLow</name>
1116
				<interface>wan</interface>
1117
				<priority>2</priority>
1118
				<bandwidth>4.9545</bandwidth>
1119
				<bandwidthtype>%</bandwidthtype>
1120
				<enabled>on</enabled>
1121
				<ecn>on</ecn>
1122
				<linkshare1>4.9545%</linkshare1>
1123
				<linkshare2>500</linkshare2>
1124
				<linkshare>on</linkshare>
1125
				<linkshare3>4.9545%</linkshare3>
1126
			</queue>
1127
		</queue>
1128
		<queue>
1129
			<interface>lan</interface>
1130
			<name>lan</name>
1131
			<scheduler>HFSC</scheduler>
1132
			<bandwidth>3000</bandwidth>
1133
			<bandwidthtype>Kb</bandwidthtype>
1134
			<enabled>on</enabled>
1135
			<queue>
1136
				<name>qInternet</name>
1137
				<interface>lan</interface>
1138
				<bandwidth>3000</bandwidth>
1139
				<bandwidthtype>Kb</bandwidthtype>
1140
				<enabled>on</enabled>
1141
				<ecn>on</ecn>
1142
				<linkshare1>3000Kb</linkshare1>
1143
				<linkshare2>100</linkshare2>
1144
				<linkshare>on</linkshare>
1145
				<linkshare3>3000Kb</linkshare3>
1146
				<upperlimit3>3000Kb</upperlimit3>
1147
				<upperlimit>on</upperlimit>
1148
				<queue>
1149
					<name>qACK</name>
1150
					<interface>lan</interface>
1151
					<priority>6</priority>
1152
					<bandwidth>19.786</bandwidth>
1153
					<bandwidthtype>%</bandwidthtype>
1154
					<enabled>on</enabled>
1155
					<ecn>on</ecn>
1156
					<linkshare1>0b</linkshare1>
1157
					<linkshare2>100</linkshare2>
1158
					<linkshare>on</linkshare>
1159
					<linkshare3>19.786%</linkshare3>
1160
				</queue>
1161
				<queue>
1162
					<name>qDefault</name>
1163
					<interface>lan</interface>
1164
					<priority>3</priority>
1165
					<bandwidth>9.893</bandwidth>
1166
					<bandwidthtype>%</bandwidthtype>
1167
					<enabled>on</enabled>
1168
					<default>on</default>
1169
					<ecn>on</ecn>
1170
				</queue>
1171
				<queue>
1172
					<name>qP2P</name>
1173
					<interface>lan</interface>
1174
					<priority>1</priority>
1175
					<bandwidth>4.9465</bandwidth>
1176
					<bandwidthtype>%</bandwidthtype>
1177
					<enabled>on</enabled>
1178
					<ecn>on</ecn>
1179
					<linkshare1>4.9465%</linkshare1>
1180
					<linkshare2>300</linkshare2>
1181
					<linkshare>on</linkshare>
1182
					<linkshare3>4.9465%</linkshare3>
1183
					<upperlimit3>4.9465%</upperlimit3>
1184
					<upperlimit>on</upperlimit>
1185
				</queue>
1186
				<queue>
1187
					<name>qVoIP</name>
1188
					<interface>lan</interface>
1189
					<priority>7</priority>
1190
					<bandwidth>32</bandwidth>
1191
					<bandwidthtype>Kb</bandwidthtype>
1192
					<enabled>on</enabled>
1193
					<ecn>on</ecn>
1194
					<realtime1>0b</realtime1>
1195
					<realtime2>10</realtime2>
1196
					<realtime>on</realtime>
1197
					<realtime3>92Kb</realtime3>
1198
				</queue>
1199
				<queue>
1200
					<name>qGames</name>
1201
					<interface>lan</interface>
1202
					<priority>5</priority>
1203
					<bandwidth>19.786</bandwidth>
1204
					<bandwidthtype>%</bandwidthtype>
1205
					<enabled>on</enabled>
1206
					<ecn>on</ecn>
1207
					<linkshare1>0b</linkshare1>
1208
					<linkshare2>50</linkshare2>
1209
					<linkshare>on</linkshare>
1210
					<linkshare3>19.786%</linkshare3>
1211
				</queue>
1212
				<queue>
1213
					<name>qOthersHigh</name>
1214
					<interface>lan</interface>
1215
					<priority>4</priority>
1216
					<bandwidth>9.893</bandwidth>
1217
					<bandwidthtype>%</bandwidthtype>
1218
					<enabled>on</enabled>
1219
					<ecn>on</ecn>
1220
					<linkshare1>0b</linkshare1>
1221
					<linkshare2>200</linkshare2>
1222
					<linkshare>on</linkshare>
1223
					<linkshare3>9.893%</linkshare3>
1224
				</queue>
1225
				<queue>
1226
					<name>qOthersLow</name>
1227
					<interface>lan</interface>
1228
					<priority>2</priority>
1229
					<bandwidth>4.9465</bandwidth>
1230
					<bandwidthtype>%</bandwidthtype>
1231
					<enabled>on</enabled>
1232
					<ecn>on</ecn>
1233
					<linkshare1>4.9465%</linkshare1>
1234
					<linkshare2>500</linkshare2>
1235
					<linkshare>on</linkshare>
1236
					<linkshare3>4.9465%</linkshare3>
1237
				</queue>
1238
			</queue>
1239
		</queue>
1240
	</shaper>
1241
	<ipsec>
1242
		<preferoldsa/>
1243
	</ipsec>
1244
	<aliases/>
1245
	<proxyarp/>
1246
	<cron>
1247
		<item>
1248
			<minute>0</minute>
1249
			<hour>*</hour>
1250
			<mday>*</mday>
1251
			<month>*</month>
1252
			<wday>*</wday>
1253
			<who>root</who>
1254
			<command>/usr/bin/nice -n20 newsyslog</command>
1255
		</item>
1256
		<item>
1257
			<minute>1,31</minute>
1258
			<hour>0-5</hour>
1259
			<mday>*</mday>
1260
			<month>*</month>
1261
			<wday>*</wday>
1262
			<who>root</who>
1263
			<command>/usr/bin/nice -n20 adjkerntz -a</command>
1264
		</item>
1265
		<item>
1266
			<minute>1</minute>
1267
			<hour>3</hour>
1268
			<mday>1</mday>
1269
			<month>*</month>
1270
			<wday>*</wday>
1271
			<who>root</who>
1272
			<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
1273
		</item>
1274
		<item>
1275
			<minute>*/60</minute>
1276
			<hour>*</hour>
1277
			<mday>*</mday>
1278
			<month>*</month>
1279
			<wday>*</wday>
1280
			<who>root</who>
1281
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
1282
		</item>
1283
		<item>
1284
			<minute>1</minute>
1285
			<hour>1</hour>
1286
			<mday>*</mday>
1287
			<month>*</month>
1288
			<wday>*</wday>
1289
			<who>root</who>
1290
			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
1291
		</item>
1292
		<item>
1293
			<minute>*/60</minute>
1294
			<hour>*</hour>
1295
			<mday>*</mday>
1296
			<month>*</month>
1297
			<wday>*</wday>
1298
			<who>root</who>
1299
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
1300
		</item>
1301
		<item>
1302
			<minute>*/5</minute>
1303
			<hour>*</hour>
1304
			<mday>*</mday>
1305
			<month>*</month>
1306
			<wday>*</wday>
1307
			<who>root</who>
1308
			<command>/usr/bin/nice -n20 /usr/local/bin/checkreload.sh</command>
1309
		</item>
1310
	</cron>
1311
	<wol/>
1312
	<rrd>
1313
		<enable/>
1314
	</rrd>
1315
	<load_balancer>
1316
		<monitor_type>
1317
			<name>ICMP</name>
1318
			<type>icmp</type>
1319
			<desc>ICMP</desc>
1320
			<options/>
1321
		</monitor_type>
1322
		<monitor_type>
1323
			<name>TCP</name>
1324
			<type>tcp</type>
1325
			<desc>Generic TCP</desc>
1326
			<options/>
1327
		</monitor_type>
1328
		<monitor_type>
1329
			<name>HTTP</name>
1330
			<type>http</type>
1331
			<desc>Generic HTTP</desc>
1332
			<options>
1333
				<path>/</path>
1334
				<host/>
1335
				<code>200</code>
1336
			</options>
1337
		</monitor_type>
1338
		<monitor_type>
1339
			<name>HTTPS</name>
1340
			<type>https</type>
1341
			<desc>Generic HTTPS</desc>
1342
			<options>
1343
				<path>/</path>
1344
				<host/>
1345
				<code>200</code>
1346
			</options>
1347
		</monitor_type>
1348
		<monitor_type>
1349
			<name>SMTP</name>
1350
			<type>send</type>
1351
			<desc>Generic SMTP</desc>
1352
			<options>
1353
				<send>EHLO nosuchhost</send>
1354
				<expect>250-</expect>
1355
			</options>
1356
		</monitor_type>
1357
	</load_balancer>
1358
	<widgets>
1359
		<sequence>system_information-container:col1:show,captive_portal_status-container:col1:close,carp_status-container:col1:close,cpu_graphs-container:col1:close,gmirror_status-container:col1:close,installed_packages-container:col1:close,interface_statistics-container:col1:close,gateways-container:col2:show,interfaces-container:col2:show,ipsec-container:col2:close,load_balancer_status-container:col2:close,log-container:col2:close,picture-container:col2:close,rss-container:col2:close,services_status-container:col2:close,traffic_graphs-container:col2:close,openvpn-container:col2:none</sequence>
1360
	</widgets>
1361
	<revision>
1362
		<time>1282008754</time>
1363
		<description><![CDATA[admin: Interface WLANBridge(opt5) is now disabled.]]></description>
1364
		<username>admin</username>
1365
	</revision>
1366
	<ppps>
1367
	</ppps>
1368
	<l7shaper>
1369
		<container/>
1370
	</l7shaper>
1371
	<dnshaper/>
1372
	<gateways>
1373
	</gateways>
1374
	<openvpn/>
1375
	<bridges>
1376
		<bridged>
1377
			<members>wan,opt1</members>
1378
			<descr/>
1379
			<maxaddr/>
1380
			<timeout/>
1381
			<maxage/>
1382
			<fwdelay/>
1383
			<hellotime/>
1384
			<priority/>
1385
			<proto>rstp</proto>
1386
			<holdcount/>
1387
			<ifpriority/>
1388
			<ifpathcost/>
1389
			<bridgeif>bridge0</bridgeif>
1390
		</bridged>
1391
		<bridged>
1392
			<members>lan,opt2</members>
1393
			<descr/>
1394
			<maxaddr/>
1395
			<timeout/>
1396
			<maxage/>
1397
			<fwdelay/>
1398
			<hellotime/>
1399
			<priority/>
1400
			<proto>rstp</proto>
1401
			<holdcount/>
1402
			<ifpriority/>
1403
			<ifpathcost/>
1404
			<bridgeif>bridge1</bridgeif>
1405
		</bridged>
1406
	</bridges>
1407
	<wireless/>
1408
	<ezshaper>
1409
		<step1>
1410
			<numberofconnections>1</numberofconnections>
1411
		</step1>
1412
		<step2>
1413
			<downloadscheduler>HFSC</downloadscheduler>
1414
			<conn0uploadscheduler>HFSC</conn0uploadscheduler>
1415
			<conn0upload>3500</conn0upload>
1416
			<conn0uploadspeed>Kb</conn0uploadspeed>
1417
			<conn0download>3000</conn0download>
1418
			<conn0downloadspeed>Kb</conn0downloadspeed>
1419
			<conn0interface>wan</conn0interface>
1420
		</step2>
1421
		<step3>
1422
			<enable>on</enable>
1423
			<provider>Panasonic</provider>
1424
			<address>xx.xx.96.41</address>
1425
			<download>92</download>
1426
			<downloadspeed>Kb</downloadspeed>
1427
			<conn0upload>92</conn0upload>
1428
			<conn0uploadspeed>Kb</conn0uploadspeed>
1429
		</step3>
1430
		<step4>
1431
			<bandwidthunit>%</bandwidthunit>
1432
		</step4>
1433
		<step5>
1434
			<enable>on</enable>
1435
			<bandwidthunit>%</bandwidthunit>
1436
			<aimster>on</aimster>
1437
			<bittorrent>on</bittorrent>
1438
			<buddyshare>on</buddyshare>
1439
			<cutemx>on</cutemx>
1440
			<dcplusplus>on</dcplusplus>
1441
			<dcc>on</dcc>
1442
			<directconnect>on</directconnect>
1443
			<directfileexpress>on</directfileexpress>
1444
			<edonkey2000>on</edonkey2000>
1445
			<fasttrack>on</fasttrack>
1446
			<gnutella>on</gnutella>
1447
			<grouper>on</grouper>
1448
			<hotcomm>on</hotcomm>
1449
			<hotlineconnect>on</hotlineconnect>
1450
			<imesh>on</imesh>
1451
			<napster>on</napster>
1452
			<opennap>on</opennap>
1453
			<scour>on</scour>
1454
			<shareaza>on</shareaza>
1455
			<songspy>on</songspy>
1456
			<winmx>on</winmx>
1457
		</step5>
1458
		<step6>
1459
			<enable>on</enable>
1460
			<quakeiii>on</quakeiii>
1461
		</step6>
1462
		<step7>
1463
			<enable>on</enable>
1464
			<msrdp>H</msrdp>
1465
			<vnc>D</vnc>
1466
			<appleremotedesktop>D</appleremotedesktop>
1467
			<pcanywhere>D</pcanywhere>
1468
			<irc>H</irc>
1469
			<jabber>D</jabber>
1470
			<icq>D</icq>
1471
			<aolinstantmessenger>D</aolinstantmessenger>
1472
			<msnmessenger>D</msnmessenger>
1473
			<teamspeak>D</teamspeak>
1474
			<pptp>D</pptp>
1475
			<ipsec>D</ipsec>
1476
			<streamingmp3>H</streamingmp3>
1477
			<rtsp>H</rtsp>
1478
			<http>H</http>
1479
			<smtp>H</smtp>
1480
			<pop3>D</pop3>
1481
			<imap>H</imap>
1482
			<lotusnotes>D</lotusnotes>
1483
			<dns>H</dns>
1484
			<icmp>D</icmp>
1485
			<smb>D</smb>
1486
			<snmp>D</snmp>
1487
			<mysqlserver>D</mysqlserver>
1488
			<nntp>D</nntp>
1489
			<cvsup>D</cvsup>
1490
			<slingbox>D</slingbox>
1491
			<hbci>D</hbci>
1492
		</step7>
1493
	</ezshaper>
1494
</pfsense>
(1-1/3)