Project

General

Profile

Bug #6850 ยป redmine-6850-config-pfSense.localdomain-20161207160722.xml

Jim Pingle, 12/07/2016 10:08 AM

 
<?xml version="1.0"?>
<pfsense>
<version>15.9</version>
<lastchange></lastchange>
<system>
<optimization>normal</optimization>
<hostname>pfSense</hostname>
<domain>localdomain</domain>
<dnsserver></dnsserver>
<dnsallowoverride></dnsallowoverride>
<group>
<name>all</name>
<description><![CDATA[All Users]]></description>
<scope>system</scope>
<gid>1998</gid>
<member>0</member>
</group>
<group>
<name>admins</name>
<description><![CDATA[System Administrators]]></description>
<scope>system</scope>
<gid>1999</gid>
<member>0</member>
<priv>page-all</priv>
</group>
<user>
<name>admin</name>
<descr><![CDATA[System Administrator]]></descr>
<scope>system</scope>
<groupname>admins</groupname>
<bcrypt-hash>$2b$10$13u6qwCOwODv34GyCMgdWub6oQF3RX0rG7c3d3X4JvzuEmAXLYDd2</bcrypt-hash>
<uid>0</uid>
<priv>user-shell-access</priv>
</user>
<nextuid>2000</nextuid>
<nextgid>2000</nextgid>
<timeservers>0.pfsense.pool.ntp.org</timeservers>
<webgui>
<protocol>https</protocol>
<loginautocomplete></loginautocomplete>
<ssl-certref>582f088a7851b</ssl-certref>
<dashboardcolumns>2</dashboardcolumns>
</webgui>
<disablenatreflection>yes</disablenatreflection>
<disablesegmentationoffloading></disablesegmentationoffloading>
<disablelargereceiveoffloading></disablelargereceiveoffloading>
<ipv6allow></ipv6allow>
<powerd_ac_mode>hadp</powerd_ac_mode>
<powerd_battery_mode>hadp</powerd_battery_mode>
<powerd_normal_mode>hadp</powerd_normal_mode>
<bogons>
<interval>monthly</interval>
</bogons>
<enablesshd></enablesshd>
</system>
<interfaces>
<wan>
<enable></enable>
<if>em0</if>
<descr><![CDATA[WAN]]></descr>
<alias-address></alias-address>
<alias-subnet>32</alias-subnet>
<spoofmac></spoofmac>
<ipaddr>192.0.2.55</ipaddr>
<subnet>32</subnet>
<gateway>WANGW</gateway>
</wan>
<lan>
<enable></enable>
<if>em1</if>
<ipaddr>192.168.1.1</ipaddr>
<subnet>24</subnet>
<ipaddrv6>track6</ipaddrv6>
<subnetv6>64</subnetv6>
<media></media>
<mediaopt></mediaopt>
<track6-interface>wan</track6-interface>
<track6-prefix-id>0</track6-prefix-id>
</lan>
</interfaces>
<staticroutes></staticroutes>
<dhcpd>
<lan>
<enable></enable>
<range>
<from>192.168.1.100</from>
<to>192.168.1.199</to>
</range>
</lan>
</dhcpd>
<dhcpdv6>
<lan>
<range>
<from>::1000</from>
<to>::2000</to>
</range>
<ramode>disabled</ramode>
<rapriority>medium</rapriority>
<prefixrange>
<from></from>
<to></to>
<prefixlength>48</prefixlength>
</prefixrange>
<defaultleasetime></defaultleasetime>
<maxleasetime></maxleasetime>
<netmask></netmask>
<domain></domain>
<domainsearchlist></domainsearchlist>
<ddnsdomain></ddnsdomain>
<ddnsdomainprimary></ddnsdomainprimary>
<ddnsdomainkeyname></ddnsdomainkeyname>
<ddnsdomainkey></ddnsdomainkey>
<ddnsclientupdates>allow</ddnsclientupdates>
<tftp></tftp>
<ldap></ldap>
<bootfile_url></bootfile_url>
<dhcpv6leaseinlocaltime></dhcpv6leaseinlocaltime>
<numberoptions></numberoptions>
<rainterface></rainterface>
<ravalidlifetime></ravalidlifetime>
<rapreferredlifetime></rapreferredlifetime>
<raminrtradvinterval></raminrtradvinterval>
<ramaxrtradvinterval></ramaxrtradvinterval>
<raadvdefaultlifetime></raadvdefaultlifetime>
<radomainsearchlist></radomainsearchlist>
</lan>
</dhcpdv6>
<snmpd>
<syslocation></syslocation>
<syscontact></syscontact>
<rocommunity>public</rocommunity>
</snmpd>
<diag>
<ipv6nat>
<ipaddr></ipaddr>
</ipv6nat>
</diag>
<syslog></syslog>
<nat>
<outbound>
<mode>automatic</mode>
</outbound>
</nat>
<filter>
<rule>
<type>pass</type>
<ipprotocol>inet</ipprotocol>
<descr><![CDATA[Default allow LAN to any rule]]></descr>
<interface>lan</interface>
<tracker>0100000101</tracker>
<source>
<network>lan</network>
</source>
<destination>
<any></any>
</destination>
</rule>
<rule>
<type>pass</type>
<ipprotocol>inet6</ipprotocol>
<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
<interface>lan</interface>
<tracker>0100000102</tracker>
<source>
<network>lan</network>
</source>
<destination>
<any></any>
</destination>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<source>
<any></any>
</source>
<destination>
<any></any>
</destination>
<statetype>keep state</statetype>
<os></os>
<descr><![CDATA[Allow all ipv4 via pfSsh.php]]></descr>
</rule>
<rule>
<type>pass</type>
<ipprotocol>inet6</ipprotocol>
<interface>wan</interface>
<source>
<any></any>
</source>
<destination>
<any></any>
</destination>
<statetype>keep state</statetype>
<os></os>
<descr><![CDATA[Allow all ipv6 via pfSsh.php]]></descr>
</rule>
</filter>
<shaper></shaper>
<ipsec></ipsec>
<aliases></aliases>
<proxyarp></proxyarp>
<cron>
<item>
<minute>1,31</minute>
<hour>0-5</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 adjkerntz -a</command>
</item>
<item>
<minute>1</minute>
<hour>3</hour>
<mday>1</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
</item>
<item>
<minute>*/60</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
</item>
<item>
<minute>*/60</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>
</item>
<item>
<minute>1</minute>
<hour>1</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
</item>
<item>
<minute>*/60</minute>
<hour>*</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
</item>
<item>
<minute>30</minute>
<hour>12</hour>
<mday>*</mday>
<month>*</month>
<wday>*</wday>
<who>root</who>
<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
</item>
</cron>
<wol></wol>
<rrd>
<enable></enable>
</rrd>
<load_balancer>
<monitor_type>
<name>ICMP</name>
<type>icmp</type>
<descr><![CDATA[ICMP]]></descr>
<options></options>
</monitor_type>
<monitor_type>
<name>TCP</name>
<type>tcp</type>
<descr><![CDATA[Generic TCP]]></descr>
<options></options>
</monitor_type>
<monitor_type>
<name>HTTP</name>
<type>http</type>
<descr><![CDATA[Generic HTTP]]></descr>
<options>
<path>/</path>
<host></host>
<code>200</code>
</options>
</monitor_type>
<monitor_type>
<name>HTTPS</name>
<type>https</type>
<descr><![CDATA[Generic HTTPS]]></descr>
<options>
<path>/</path>
<host></host>
<code>200</code>
</options>
</monitor_type>
<monitor_type>
<name>SMTP</name>
<type>send</type>
<descr><![CDATA[Generic SMTP]]></descr>
<options>
<send></send>
<expect>220 *</expect>
</options>
</monitor_type>
</load_balancer>
<widgets>
<sequence>system_information:col1:show,interfaces:col2:show</sequence>
<period>10</period>
</widgets>
<openvpn></openvpn>
<dnshaper></dnshaper>
<unbound>
<enable></enable>
<dnssec></dnssec>
<active_interface></active_interface>
<outgoing_interface></outgoing_interface>
<custom_options></custom_options>
<hideidentity></hideidentity>
<hideversion></hideversion>
<dnssecstripped></dnssecstripped>
</unbound>
<dyndnses></dyndnses>
<revision>
<time>1481125328</time>
<description><![CDATA[admin@192.168.1.101: /system_gateways_edit.php made unknown change]]></description>
<username>admin@192.168.1.101</username>
</revision>
<cert>
<refid>582f088a7851b</refid>
<descr><![CDATA[webConfigurator default (582f088a7851b)]]></descr>
<type>server</type>
<crt>LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZiVENDQkZXZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBRENCdERFTE1Ba0dBMVVFQmhNQ1ZWTXgKRGpBTUJnTlZCQWdUQlZOMFlYUmxNUkV3RHdZRFZRUUhFd2hNYjJOaGJHbDBlVEU0TURZR0ExVUVDaE12Y0daVApaVzV6WlNCM1pXSkRiMjVtYVdkMWNtRjBiM0lnVTJWc1ppMVRhV2R1WldRZ1EyVnlkR2xtYVdOaGRHVXhLREFtCkJna3Foa2lHOXcwQkNRRVdHV0ZrYldsdVFIQm1VMlZ1YzJVdWJHOWpZV3hrYjIxaGFXNHhIakFjQmdOVkJBTVQKRlhCbVUyVnVjMlV0TlRneVpqQTRPR0UzT0RVeFlqQWVGdzB4TmpFeE1UZ3hNelUyTWpaYUZ3MHlNakExTVRFeApNelUyTWpaYU1JRzBNUXN3Q1FZRFZRUUdFd0pWVXpFT01Bd0dBMVVFQ0JNRlUzUmhkR1V4RVRBUEJnTlZCQWNUCkNFeHZZMkZzYVhSNU1UZ3dOZ1lEVlFRS0V5OXdabE5sYm5ObElIZGxZa052Ym1acFozVnlZWFJ2Y2lCVFpXeG0KTFZOcFoyNWxaQ0JEWlhKMGFXWnBZMkYwWlRFb01DWUdDU3FHU0liM0RRRUpBUllaWVdSdGFXNUFjR1pUWlc1egpaUzVzYjJOaGJHUnZiV0ZwYmpFZU1Cd0dBMVVFQXhNVmNHWlRaVzV6WlMwMU9ESm1NRGc0WVRjNE5URmlNSUlCCklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUF0OXRycHE0SXhwOGdha0s3M1o4VGJhMjQKVXNGbXUzdkJRMzF2bmp5QWE3VmhtQ1R2UkdzVUVObkpVNml0bGJGN3J1NW5nMTVhZWpNSjNGczFxTW9BMmUybgoreldtQTQvWXpOUnVLd0h3WTViMVRXVGJxVFFQUWRnZmRhWDA2NXJMdFB5QTArVWtJMDF5TUJsTGgvM0FpU1lLCkZTQXBySzRWYndvV0ZXQUFKWSs0ZkJMNGZkYTN4andVOWJUeERrWm85UVorMExHUCtWNEFheXJ0Nmxjd3dCSXEKNVlGMXpVVHcxL1Nucjc0SjA5M203ODNwWG4wWmc4Z1B4TW52RFNUSWFTcVpwSjI2TGRlR3JxYW1aY25YVllmQwpQaUtCSnBIeU91WkNjVjdCb0pWNXp2dGozemk0OTdMK0lOYWhwaUtUaHdqV0VIWG5MQzBwTU9NUzRXbThpd0lECkFRQUJvNElCaGpDQ0FZSXdDUVlEVlIwVEJBSXdBREFSQmdsZ2hrZ0JodmhDQVFFRUJBTUNCa0F3TXdZSllJWkkKQVliNFFnRU5CQ1lXSkU5d1pXNVRVMHdnUjJWdVpYSmhkR1ZrSUZObGNuWmxjaUJEWlhKMGFXWnBZMkYwWlRBZApCZ05WSFE0RUZnUVVlWERMVUdhK3F5Tjhlb3hhUDZXZ3NwRTkyVEl3Z2VFR0ExVWRJd1NCMlRDQjFvQVVlWERMClVHYStxeU44ZW94YVA2V2dzcEU5MlRLaGdicWtnYmN3Z2JReEN6QUpCZ05WQkFZVEFsVlRNUTR3REFZRFZRUUkKRXdWVGRHRjBaVEVSTUE4R0ExVUVCeE1JVEc5allXeHBkSGt4T0RBMkJnTlZCQW9UTDNCbVUyVnVjMlVnZDJWaQpRMjl1Wm1sbmRYSmhkRzl5SUZObGJHWXRVMmxuYm1Wa0lFTmxjblJwWm1sallYUmxNU2d3SmdZSktvWklodmNOCkFRa0JGaGxoWkcxcGJrQndabE5sYm5ObExteHZZMkZzWkc5dFlXbHVNUjR3SEFZRFZRUURFeFZ3WmxObGJuTmwKTFRVNE1tWXdPRGhoTnpnMU1XS0NBUUF3SFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQ0FJQwpNQXNHQTFVZER3UUVBd0lGb0RBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQU9YSzlmS0dVUjVIS3E0dmF1NEdOCmZ6N0RnSyt1WWhzcEczVytSQ1RMTmNyb0d4dmUxVVhIbEhtZGVLcTdZRDdQMDNtaE1BSitJVE5zSFp0MXBQd1AKSGtoaXJkZ2U4SnR3dnNKdHBUWVFBUE1tWjJuTEdqTHVpSDlKcCtLa2Z4LzRWT0krOHhvN0VBSDZTNDZwVkU5dwpTcGxydGk4MHV5dm5RbytIRDdJVjZXUFh2b0dSV2Fwa1pFNksrVVBlSEtKa21ZYlNYSXZzVkpxaEVtRUd0dk1mCkV3MXdZL3Naa2dmZUczYVVaUmdrN3RRNU9yL3dLdGorT1JEYlp3UXJ1R0NTM1c1bU0wQ2d4OU9CblNRUVVaNFgKWFB6ZjVRQlZSR0JLdDNRbnFUTXNsekNqV2pBYmwzc28rTU1NUjh5VytjV1pTL2dpWlVqR1UwMnAvL1ZiYWtTYgpVQT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K</crt>
<prv>LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUV2Z0lCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQktnd2dnU2tBZ0VBQW9JQkFRQzMyMnVtcmdqR255QnEKUXJ2ZG54TnRyYmhTd1dhN2U4RkRmVytlUElCcnRXR1lKTzlFYXhRUTJjbFRxSzJWc1h1dTdtZURYbHA2TXduYwpXeldveWdEWjdhZjdOYVlEajlqTTFHNHJBZkJqbHZWTlpOdXBOQTlCMkI5MXBmVHJtc3UwL0lEVDVTUWpUWEl3CkdVdUgvY0NKSmdvVklDbXNyaFZ2Q2hZVllBQWxqN2g4RXZoOTFyZkdQQlQxdFBFT1JtajFCbjdRc1kvNVhnQnIKS3UzcVZ6REFFaXJsZ1hYTlJQRFg5S2V2dmduVDNlYnZ6ZWxlZlJtRHlBL0V5ZThOSk1ocEtwbWtuYm90MTRhdQpwcVpseWRkVmg4SStJb0Vta2ZJNjVrSnhYc0dnbFhuTysyUGZPTGozc3Y0ZzFxR21JcE9IQ05ZUWRlY3NMU2t3CjR4TGhhYnlMQWdNQkFBRUNnZ0VCQUtta1plSDN0dFU5d2pVSnVqbzFLMElLQm9jbE9GdEpSdnUwNDZhSGdKN2gKVDFtSXl0VEFVRlZ6L2hXWkVBR05MK2dxeFl3ckpTU1hyME9KVFN1ZXA4WnRTSSs3NHFCcXU4blRRSXVpVUdJegp5Y2ROaG5qTE5rQzAzK0kzN0pMdjA0SDljZ2tSNXBSRVExWXFJTTByejlrOEpoVjBCYi8xS0lXNk1zSXFRRGhtCm4ybUJHeUJockdlMk5hZlpBOXVkYWtwVUNlUHpkV09RTlFJbmc0a1MyNkZTUE96NTJZNWlZYVYyMHdVVjNxb0sKVTdvQTdQUGZrODJPSVdLM1NQanpEZDdEWG1jNkxOK3BMcFpmdVhndmNETVhScUxvU01Nako4dWFwMmZuemJLaQppblJnMWxCUWcveUYwUDhFUnVkdTBVRFdMQVRsNzVkTGJSVE9FSWpvcDhFQ2dZRUE4UUUvZkwrTldPUFVzYll1Cm1pUmJOMzdLcDRieGVseUtVYklyWVhoU0wwMmdWa1MvRmtXSTlnKy9NRGJES3k5ejRScWxhWE0yaVdkQWZGRUQKZ29JTlIxd1NTbm9POG5sWnNDTWk5anc4eXBRR3VQSm1ZZFVuaVFJbFpLOHNydnNQbnlGem5lYUdreWZQZmVrNgpEVThCdFMxRXlnUTlmRCtKTmlMMkFqZnREaEVDZ1lFQXcwdnFxLzJRemErdkVuSitTZU9KcFN4T2thNU1mdURyCmwwYW1LZW1PRytPRnFNV3VQSUo1L3YvUmM4eGIrcGVibTBoTVhLUmhEcjA5L21NUkhPQlNFMDEwdHBhVitnUkcKby8ySG9tbUtjTHRvOXp3a3FFeTcxNzh1b3dEdVZxU3MxeFY5eFZjTWVQUWxMblRPUi9nYXRjdU9iaXJZZ29JYwoyU2Nnb2NoUGROc0NnWUJtMVoxOVlVNnlxeVJLWCs0cW4zQzhrVUZ2a2tqZmFUVXIvdFk3MU5kY2o4Ym1pSmJ3CnJlTHUrM0VjNVlFSm9FblZ0MFQxWmMvVGVWY3V0SExHOFM4eFQ3d09RMTYxWDhwQk9memxESGIwQ1kyRXhRbWkKblEwdGpOamZ5VTlMcXB6VHpiWkRuZVcyVExwZ2cyL2QxZVJvcGxRL3p1ZGRhTTduWnF1Sjdzc2J3UUtCZ0E3UQpORldsWHhWcTdRR2VNNXdSS1VDaEVyaVVHdk5JeGpYc1F2Qk02ZDJOclhhMnY5ZVJJZ1hJaTYrWDRhWXBWOEU0Cmc2cEhRYUZuazBzM1luWHBRZkI2NEk1MDc1MU9NN2wrb29vY0xVY053QkY0dTJNVXB1N2Zibjhvcyt0WWhFK3cKTHFFSVVFYmdaZTJYS0lwbTlFZXp6L0xsUnhUbkg1OE5DN21ad3dVZkFvR0JBS3N2VERJUlA1ejlXUFVGZ0QvWApVZU10cFYzWThRNnFiYkVhL2dablhCRUFtd1hMOFN0TkFZdnQ2ME5DZUxUQ0tjdzZET0dOMXlkbGJ1SVZBZytCCmVxaDQzb09PSklqaVRtSkp0dTU2OUw3aHRaTlRMb2dhbDZYaVdkU2xWcmtseHFBbWZYb2hIZmxxSm9JMnpzZFAKUzcyeUNGT0ZyREdXMVZhV2hnSXdubFZGCi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0K</prv>
</cert>
<ppps></ppps>
<gateways>
<gateway_item>
<interface>wan</interface>
<gateway>198.51.100.1</gateway>
<name>WANGW</name>
<weight>1</weight>
<ipprotocol>inet</ipprotocol>
<descr></descr>
<nonlocalgateway></nonlocalgateway>
<defaultgw></defaultgw>
</gateway_item>
</gateways>
</pfsense>
    (1-1/1)