1
|
<?xml version="1.0"?>
|
2
|
<pfsense>
|
3
|
<version>16.4</version>
|
4
|
<lastchange></lastchange>
|
5
|
<system>
|
6
|
<optimization>normal</optimization>
|
7
|
<hostname>router</hostname>
|
8
|
<domain>nullcompany.com</domain>
|
9
|
<group>
|
10
|
<name>all</name>
|
11
|
<description><![CDATA[All Users]]></description>
|
12
|
<scope>system</scope>
|
13
|
<gid>1998</gid>
|
14
|
<member>0</member>
|
15
|
</group>
|
16
|
<group>
|
17
|
<name>admins</name>
|
18
|
<description><![CDATA[System Administrators]]></description>
|
19
|
<scope>system</scope>
|
20
|
<gid>1999</gid>
|
21
|
<member>0</member>
|
22
|
<priv>page-all</priv>
|
23
|
</group>
|
24
|
<user>
|
25
|
<name>admin</name>
|
26
|
<descr><![CDATA[System Administrator]]></descr>
|
27
|
<scope>system</scope>
|
28
|
<groupname>admins</groupname>
|
29
|
<bcrypt-hash>$2b$10$z4Mmq/C2cx12MjTZ2KIyfuSLb8WP0RforDk6mnmEhYgGjYrnIEYDS</bcrypt-hash>
|
30
|
<uid>0</uid>
|
31
|
<priv>user-shell-access</priv>
|
32
|
</user>
|
33
|
<nextuid>2000</nextuid>
|
34
|
<nextgid>2000</nextgid>
|
35
|
<timeservers>0.pfsense.pool.ntp.org</timeservers>
|
36
|
<webgui>
|
37
|
<protocol>http</protocol>
|
38
|
<loginautocomplete></loginautocomplete>
|
39
|
<ssl-certref>5877cff0d49bd</ssl-certref>
|
40
|
<dashboardcolumns>2</dashboardcolumns>
|
41
|
<webguicss>pfSense.css</webguicss>
|
42
|
<loginshowhost></loginshowhost>
|
43
|
<port></port>
|
44
|
<max_procs>2</max_procs>
|
45
|
</webgui>
|
46
|
<disablenatreflection>yes</disablenatreflection>
|
47
|
<disablesegmentationoffloading></disablesegmentationoffloading>
|
48
|
<disablelargereceiveoffloading></disablelargereceiveoffloading>
|
49
|
<ipv6allow></ipv6allow>
|
50
|
<powerd_ac_mode>hadp</powerd_ac_mode>
|
51
|
<powerd_battery_mode>hadp</powerd_battery_mode>
|
52
|
<powerd_normal_mode>hadp</powerd_normal_mode>
|
53
|
<bogons>
|
54
|
<interval>monthly</interval>
|
55
|
</bogons>
|
56
|
<watchdogd_enable></watchdogd_enable>
|
57
|
<watchdogd_timeout>128</watchdogd_timeout>
|
58
|
<enableserial></enableserial>
|
59
|
<timezone>Etc/UTC</timezone>
|
60
|
<language>en_US</language>
|
61
|
<dns1gw>none</dns1gw>
|
62
|
<dns2gw>none</dns2gw>
|
63
|
<dns3gw>none</dns3gw>
|
64
|
<dns4gw>none</dns4gw>
|
65
|
<serialspeed>115200</serialspeed>
|
66
|
<enablesshd>enabled</enablesshd>
|
67
|
<dnsserver>8.8.8.8</dnsserver>
|
68
|
<dnsallowoverride></dnsallowoverride>
|
69
|
<crypto_hardware>cryptodev</crypto_hardware>
|
70
|
</system>
|
71
|
<interfaces>
|
72
|
<wan>
|
73
|
<enable></enable>
|
74
|
<if>cpsw0</if>
|
75
|
<blockpriv></blockpriv>
|
76
|
<blockbogons></blockbogons>
|
77
|
<descr><![CDATA[RIGHT]]></descr>
|
78
|
<spoofmac></spoofmac>
|
79
|
</wan>
|
80
|
<lan>
|
81
|
<enable></enable>
|
82
|
<if>cpsw1</if>
|
83
|
<descr><![CDATA[LEFT]]></descr>
|
84
|
<spoofmac></spoofmac>
|
85
|
<ipaddr>192.168.1.1</ipaddr>
|
86
|
<subnet>24</subnet>
|
87
|
</lan>
|
88
|
<opt1>
|
89
|
<descr><![CDATA[LAN_VLAN]]></descr>
|
90
|
<if>cpsw0_vlan1</if>
|
91
|
<enable></enable>
|
92
|
<spoofmac></spoofmac>
|
93
|
<ipaddr>10.0.0.1</ipaddr>
|
94
|
<subnet>24</subnet>
|
95
|
<ipaddrv6>track6</ipaddrv6>
|
96
|
<track6-interface>opt2</track6-interface>
|
97
|
<track6-prefix-id>1</track6-prefix-id>
|
98
|
</opt1>
|
99
|
<opt2>
|
100
|
<descr><![CDATA[WAN_VLAN]]></descr>
|
101
|
<if>cpsw0_vlan2</if>
|
102
|
<enable></enable>
|
103
|
<spoofmac></spoofmac>
|
104
|
<alias-address></alias-address>
|
105
|
<alias-subnet>32</alias-subnet>
|
106
|
<ipaddr>dhcp</ipaddr>
|
107
|
<dhcphostname></dhcphostname>
|
108
|
<dhcprejectfrom></dhcprejectfrom>
|
109
|
<adv_dhcp_pt_timeout></adv_dhcp_pt_timeout>
|
110
|
<adv_dhcp_pt_retry></adv_dhcp_pt_retry>
|
111
|
<adv_dhcp_pt_select_timeout></adv_dhcp_pt_select_timeout>
|
112
|
<adv_dhcp_pt_reboot></adv_dhcp_pt_reboot>
|
113
|
<adv_dhcp_pt_backoff_cutoff></adv_dhcp_pt_backoff_cutoff>
|
114
|
<adv_dhcp_pt_initial_interval></adv_dhcp_pt_initial_interval>
|
115
|
<adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>
|
116
|
<adv_dhcp_send_options></adv_dhcp_send_options>
|
117
|
<adv_dhcp_request_options></adv_dhcp_request_options>
|
118
|
<adv_dhcp_required_options></adv_dhcp_required_options>
|
119
|
<adv_dhcp_option_modifiers></adv_dhcp_option_modifiers>
|
120
|
<adv_dhcp_config_advanced></adv_dhcp_config_advanced>
|
121
|
<adv_dhcp_config_file_override></adv_dhcp_config_file_override>
|
122
|
<adv_dhcp_config_file_override_path></adv_dhcp_config_file_override_path>
|
123
|
<ipaddrv6>dhcp6</ipaddrv6>
|
124
|
<dhcp6-duid></dhcp6-duid>
|
125
|
<dhcp6-ia-pd-len>4</dhcp6-ia-pd-len>
|
126
|
<dhcp6-ia-pd-send-hint></dhcp6-ia-pd-send-hint>
|
127
|
<dhcp6debug></dhcp6debug>
|
128
|
<dhcp6withoutra></dhcp6withoutra>
|
129
|
<dhcp6norelease></dhcp6norelease>
|
130
|
<adv_dhcp6_prefix_interface_statement_sla_len>4</adv_dhcp6_prefix_interface_statement_sla_len>
|
131
|
</opt2>
|
132
|
<opt3>
|
133
|
<descr><![CDATA[TEST_VLAN]]></descr>
|
134
|
<if>cpsw0_vlan3</if>
|
135
|
<enable></enable>
|
136
|
<spoofmac></spoofmac>
|
137
|
<ipaddr>10.255.0.1</ipaddr>
|
138
|
<subnet>24</subnet>
|
139
|
</opt3>
|
140
|
<opt4>
|
141
|
<descr><![CDATA[GUEST_VLAN]]></descr>
|
142
|
<if>cpsw0_vlan4</if>
|
143
|
<enable></enable>
|
144
|
<spoofmac></spoofmac>
|
145
|
<ipaddr>10.0.100.1</ipaddr>
|
146
|
<subnet>24</subnet>
|
147
|
</opt4>
|
148
|
</interfaces>
|
149
|
<staticroutes></staticroutes>
|
150
|
<dhcpd>
|
151
|
<lan>
|
152
|
<range>
|
153
|
<from>192.168.1.10</from>
|
154
|
<to>192.168.1.12</to>
|
155
|
</range>
|
156
|
<dhcpleaseinlocaltime></dhcpleaseinlocaltime>
|
157
|
<failover_peerip></failover_peerip>
|
158
|
<defaultleasetime></defaultleasetime>
|
159
|
<maxleasetime></maxleasetime>
|
160
|
<netmask></netmask>
|
161
|
<dnsserver>192.168.1.1</dnsserver>
|
162
|
<gateway></gateway>
|
163
|
<domain></domain>
|
164
|
<domainsearchlist></domainsearchlist>
|
165
|
<ddnsdomain></ddnsdomain>
|
166
|
<ddnsdomainprimary></ddnsdomainprimary>
|
167
|
<ddnsdomainkeyname></ddnsdomainkeyname>
|
168
|
<ddnsdomainkey></ddnsdomainkey>
|
169
|
<mac_allow></mac_allow>
|
170
|
<mac_deny></mac_deny>
|
171
|
<tftp></tftp>
|
172
|
<ldap></ldap>
|
173
|
<nextserver></nextserver>
|
174
|
<filename></filename>
|
175
|
<filename32></filename32>
|
176
|
<filename64></filename64>
|
177
|
<rootpath></rootpath>
|
178
|
<numberoptions></numberoptions>
|
179
|
</lan>
|
180
|
<opt1>
|
181
|
<range>
|
182
|
<from>10.0.0.100</from>
|
183
|
<to>10.0.0.199</to>
|
184
|
</range>
|
185
|
<enable></enable>
|
186
|
<failover_peerip></failover_peerip>
|
187
|
<defaultleasetime></defaultleasetime>
|
188
|
<maxleasetime></maxleasetime>
|
189
|
<netmask></netmask>
|
190
|
<gateway></gateway>
|
191
|
<domain></domain>
|
192
|
<domainsearchlist></domainsearchlist>
|
193
|
<ddnsdomain></ddnsdomain>
|
194
|
<ddnsdomainprimary></ddnsdomainprimary>
|
195
|
<ddnsdomainkeyname></ddnsdomainkeyname>
|
196
|
<ddnsdomainkey></ddnsdomainkey>
|
197
|
<mac_allow></mac_allow>
|
198
|
<mac_deny></mac_deny>
|
199
|
<tftp></tftp>
|
200
|
<ldap></ldap>
|
201
|
<nextserver></nextserver>
|
202
|
<filename></filename>
|
203
|
<filename32></filename32>
|
204
|
<filename64></filename64>
|
205
|
<rootpath></rootpath>
|
206
|
<numberoptions></numberoptions>
|
207
|
<dhcpleaseinlocaltime></dhcpleaseinlocaltime>
|
208
|
<dnsserver>10.0.0.1</dnsserver>
|
209
|
</opt1>
|
210
|
</dhcpd>
|
211
|
<dhcpdv6>
|
212
|
<lan>
|
213
|
<range>
|
214
|
<from>::1000</from>
|
215
|
<to>::2000</to>
|
216
|
</range>
|
217
|
<ramode>assist</ramode>
|
218
|
<rapriority>medium</rapriority>
|
219
|
</lan>
|
220
|
<opt1>
|
221
|
<ramode>unmanaged</ramode>
|
222
|
<rapriority>medium</rapriority>
|
223
|
<rainterface></rainterface>
|
224
|
<ravalidlifetime></ravalidlifetime>
|
225
|
<rapreferredlifetime></rapreferredlifetime>
|
226
|
<raminrtradvinterval></raminrtradvinterval>
|
227
|
<ramaxrtradvinterval></ramaxrtradvinterval>
|
228
|
<raadvdefaultlifetime></raadvdefaultlifetime>
|
229
|
<radomainsearchlist></radomainsearchlist>
|
230
|
<rasamednsasdhcp6></rasamednsasdhcp6>
|
231
|
<range>
|
232
|
<from>::ffff:ffff:ffff:ff00</from>
|
233
|
<to>::ffff:ffff:ffff:fffe</to>
|
234
|
</range>
|
235
|
<prefixrange>
|
236
|
<from></from>
|
237
|
<to></to>
|
238
|
<prefixlength>48</prefixlength>
|
239
|
</prefixrange>
|
240
|
<defaultleasetime></defaultleasetime>
|
241
|
<maxleasetime></maxleasetime>
|
242
|
<netmask></netmask>
|
243
|
<domain></domain>
|
244
|
<domainsearchlist></domainsearchlist>
|
245
|
<ddnsdomain></ddnsdomain>
|
246
|
<ddnsdomainprimary></ddnsdomainprimary>
|
247
|
<ddnsdomainkeyname></ddnsdomainkeyname>
|
248
|
<ddnsdomainkey></ddnsdomainkey>
|
249
|
<ddnsclientupdates>allow</ddnsclientupdates>
|
250
|
<tftp></tftp>
|
251
|
<ldap></ldap>
|
252
|
<bootfile_url></bootfile_url>
|
253
|
<dhcpv6leaseinlocaltime></dhcpv6leaseinlocaltime>
|
254
|
<numberoptions></numberoptions>
|
255
|
</opt1>
|
256
|
</dhcpdv6>
|
257
|
<snmpd>
|
258
|
<syslocation></syslocation>
|
259
|
<syscontact></syscontact>
|
260
|
<rocommunity>public</rocommunity>
|
261
|
</snmpd>
|
262
|
<diag>
|
263
|
<ipv6nat>
|
264
|
<ipaddr></ipaddr>
|
265
|
</ipv6nat>
|
266
|
</diag>
|
267
|
<syslog>
|
268
|
<nentries>500</nentries>
|
269
|
<sourceip></sourceip>
|
270
|
<ipproto>ipv4</ipproto>
|
271
|
<reverse></reverse>
|
272
|
</syslog>
|
273
|
<nat>
|
274
|
<outbound>
|
275
|
<mode>hybrid</mode>
|
276
|
<rule>
|
277
|
<source>
|
278
|
<network>any</network>
|
279
|
</source>
|
280
|
<sourceport></sourceport>
|
281
|
<descr></descr>
|
282
|
<target></target>
|
283
|
<targetip></targetip>
|
284
|
<targetip_subnet></targetip_subnet>
|
285
|
<interface>opt1</interface>
|
286
|
<poolopts></poolopts>
|
287
|
<source_hash_key></source_hash_key>
|
288
|
<destination>
|
289
|
<any></any>
|
290
|
</destination>
|
291
|
<updated>
|
292
|
<time>1489596225</time>
|
293
|
<username>admin@10.0.0.155</username>
|
294
|
</updated>
|
295
|
<created>
|
296
|
<time>1489596225</time>
|
297
|
<username>admin@10.0.0.155</username>
|
298
|
</created>
|
299
|
</rule>
|
300
|
</outbound>
|
301
|
</nat>
|
302
|
<filter>
|
303
|
<rule>
|
304
|
<type>pass</type>
|
305
|
<ipprotocol>inet</ipprotocol>
|
306
|
<descr><![CDATA[Default allow LAN to any rule]]></descr>
|
307
|
<interface>lan</interface>
|
308
|
<tracker>0100000101</tracker>
|
309
|
<source>
|
310
|
<network>lan</network>
|
311
|
</source>
|
312
|
<destination>
|
313
|
<any></any>
|
314
|
</destination>
|
315
|
</rule>
|
316
|
<rule>
|
317
|
<type>pass</type>
|
318
|
<ipprotocol>inet6</ipprotocol>
|
319
|
<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
|
320
|
<interface>lan</interface>
|
321
|
<tracker>0100000102</tracker>
|
322
|
<source>
|
323
|
<network>lan</network>
|
324
|
</source>
|
325
|
<destination>
|
326
|
<any></any>
|
327
|
</destination>
|
328
|
</rule>
|
329
|
<rule>
|
330
|
<id></id>
|
331
|
<tracker>1489596364</tracker>
|
332
|
<type>pass</type>
|
333
|
<interface>opt1</interface>
|
334
|
<ipprotocol>inet46</ipprotocol>
|
335
|
<tag></tag>
|
336
|
<tagged></tagged>
|
337
|
<max></max>
|
338
|
<max-src-nodes></max-src-nodes>
|
339
|
<max-src-conn></max-src-conn>
|
340
|
<max-src-states></max-src-states>
|
341
|
<statetimeout></statetimeout>
|
342
|
<statetype>keep state</statetype>
|
343
|
<os></os>
|
344
|
<source>
|
345
|
<any></any>
|
346
|
</source>
|
347
|
<destination>
|
348
|
<any></any>
|
349
|
</destination>
|
350
|
<descr></descr>
|
351
|
<updated>
|
352
|
<time>1489596364</time>
|
353
|
<username>admin@10.0.0.155</username>
|
354
|
</updated>
|
355
|
<created>
|
356
|
<time>1489596364</time>
|
357
|
<username>admin@10.0.0.155</username>
|
358
|
</created>
|
359
|
</rule>
|
360
|
<rule>
|
361
|
<id></id>
|
362
|
<tracker>1489595757</tracker>
|
363
|
<type>pass</type>
|
364
|
<interface>opt1</interface>
|
365
|
<ipprotocol>inet</ipprotocol>
|
366
|
<tag></tag>
|
367
|
<tagged></tagged>
|
368
|
<max></max>
|
369
|
<max-src-nodes></max-src-nodes>
|
370
|
<max-src-conn></max-src-conn>
|
371
|
<max-src-states></max-src-states>
|
372
|
<statetimeout></statetimeout>
|
373
|
<statetype>keep state</statetype>
|
374
|
<os></os>
|
375
|
<protocol>tcp/udp</protocol>
|
376
|
<source>
|
377
|
<any></any>
|
378
|
</source>
|
379
|
<destination>
|
380
|
<any></any>
|
381
|
<port>53</port>
|
382
|
</destination>
|
383
|
<descr></descr>
|
384
|
<updated>
|
385
|
<time>1489595757</time>
|
386
|
<username>admin@10.0.0.155</username>
|
387
|
</updated>
|
388
|
<created>
|
389
|
<time>1489595757</time>
|
390
|
<username>admin@10.0.0.155</username>
|
391
|
</created>
|
392
|
</rule>
|
393
|
<rule>
|
394
|
<id></id>
|
395
|
<tracker>1488702715</tracker>
|
396
|
<type>pass</type>
|
397
|
<interface>opt1</interface>
|
398
|
<ipprotocol>inet</ipprotocol>
|
399
|
<tag></tag>
|
400
|
<tagged></tagged>
|
401
|
<max></max>
|
402
|
<max-src-nodes></max-src-nodes>
|
403
|
<max-src-conn></max-src-conn>
|
404
|
<max-src-states></max-src-states>
|
405
|
<statetimeout></statetimeout>
|
406
|
<statetype>keep state</statetype>
|
407
|
<os></os>
|
408
|
<protocol>tcp</protocol>
|
409
|
<source>
|
410
|
<any></any>
|
411
|
</source>
|
412
|
<destination>
|
413
|
<any></any>
|
414
|
<port>80</port>
|
415
|
</destination>
|
416
|
<descr></descr>
|
417
|
<updated>
|
418
|
<time>1488702715</time>
|
419
|
<username>admin@192.168.1.2</username>
|
420
|
</updated>
|
421
|
<created>
|
422
|
<time>1488702715</time>
|
423
|
<username>admin@192.168.1.2</username>
|
424
|
</created>
|
425
|
</rule>
|
426
|
<rule>
|
427
|
<id></id>
|
428
|
<tracker>1488702216</tracker>
|
429
|
<type>pass</type>
|
430
|
<interface>opt1</interface>
|
431
|
<ipprotocol>inet</ipprotocol>
|
432
|
<tag></tag>
|
433
|
<tagged></tagged>
|
434
|
<max></max>
|
435
|
<max-src-nodes></max-src-nodes>
|
436
|
<max-src-conn></max-src-conn>
|
437
|
<max-src-states></max-src-states>
|
438
|
<statetimeout></statetimeout>
|
439
|
<statetype>keep state</statetype>
|
440
|
<os></os>
|
441
|
<protocol>tcp</protocol>
|
442
|
<source>
|
443
|
<any></any>
|
444
|
</source>
|
445
|
<destination>
|
446
|
<any></any>
|
447
|
<port>22</port>
|
448
|
</destination>
|
449
|
<descr></descr>
|
450
|
<updated>
|
451
|
<time>1488702216</time>
|
452
|
<username>admin@192.168.1.2</username>
|
453
|
</updated>
|
454
|
<created>
|
455
|
<time>1488702216</time>
|
456
|
<username>admin@192.168.1.2</username>
|
457
|
</created>
|
458
|
</rule>
|
459
|
<rule>
|
460
|
<id></id>
|
461
|
<tracker>1490746517</tracker>
|
462
|
<type>pass</type>
|
463
|
<interface>opt2</interface>
|
464
|
<ipprotocol>inet6</ipprotocol>
|
465
|
<tag></tag>
|
466
|
<tagged></tagged>
|
467
|
<max></max>
|
468
|
<max-src-nodes></max-src-nodes>
|
469
|
<max-src-conn></max-src-conn>
|
470
|
<max-src-states></max-src-states>
|
471
|
<statetimeout></statetimeout>
|
472
|
<statetype>keep state</statetype>
|
473
|
<os></os>
|
474
|
<protocol>icmp</protocol>
|
475
|
<icmptype>any</icmptype>
|
476
|
<source>
|
477
|
<any></any>
|
478
|
</source>
|
479
|
<destination>
|
480
|
<any></any>
|
481
|
</destination>
|
482
|
<log></log>
|
483
|
<descr><![CDATA[ICMPv6]]></descr>
|
484
|
<updated>
|
485
|
<time>1490746517</time>
|
486
|
<username>admin@10.0.0.114</username>
|
487
|
</updated>
|
488
|
<created>
|
489
|
<time>1490746517</time>
|
490
|
<username>admin@10.0.0.114</username>
|
491
|
</created>
|
492
|
</rule>
|
493
|
<rule>
|
494
|
<id></id>
|
495
|
<tracker>1489619637</tracker>
|
496
|
<type>reject</type>
|
497
|
<interface>opt2</interface>
|
498
|
<ipprotocol>inet</ipprotocol>
|
499
|
<tag></tag>
|
500
|
<tagged></tagged>
|
501
|
<max></max>
|
502
|
<max-src-nodes></max-src-nodes>
|
503
|
<max-src-conn></max-src-conn>
|
504
|
<max-src-states></max-src-states>
|
505
|
<statetimeout></statetimeout>
|
506
|
<statetype>keep state</statetype>
|
507
|
<os></os>
|
508
|
<protocol>tcp</protocol>
|
509
|
<source>
|
510
|
<any></any>
|
511
|
</source>
|
512
|
<destination>
|
513
|
<network>opt2ip</network>
|
514
|
<port>22</port>
|
515
|
</destination>
|
516
|
<log></log>
|
517
|
<descr><![CDATA[SSH-HACKERS]]></descr>
|
518
|
<updated>
|
519
|
<time>1489619637</time>
|
520
|
<username>admin@10.0.0.105</username>
|
521
|
</updated>
|
522
|
<created>
|
523
|
<time>1489619637</time>
|
524
|
<username>admin@10.0.0.105</username>
|
525
|
</created>
|
526
|
</rule>
|
527
|
<rule>
|
528
|
<id></id>
|
529
|
<tracker>1489605041</tracker>
|
530
|
<type>pass</type>
|
531
|
<interface>opt2</interface>
|
532
|
<ipprotocol>inet6</ipprotocol>
|
533
|
<tag></tag>
|
534
|
<tagged></tagged>
|
535
|
<max></max>
|
536
|
<max-src-nodes></max-src-nodes>
|
537
|
<max-src-conn></max-src-conn>
|
538
|
<max-src-states></max-src-states>
|
539
|
<statetimeout></statetimeout>
|
540
|
<statetype>keep state</statetype>
|
541
|
<os></os>
|
542
|
<source>
|
543
|
<any></any>
|
544
|
</source>
|
545
|
<destination>
|
546
|
<any></any>
|
547
|
</destination>
|
548
|
<descr></descr>
|
549
|
<created>
|
550
|
<time>1489605041</time>
|
551
|
<username>admin@10.0.0.105</username>
|
552
|
</created>
|
553
|
<updated>
|
554
|
<time>1490746486</time>
|
555
|
<username>admin@10.0.0.114</username>
|
556
|
</updated>
|
557
|
</rule>
|
558
|
<rule>
|
559
|
<id></id>
|
560
|
<tracker>1488701901</tracker>
|
561
|
<type>pass</type>
|
562
|
<interface>opt2</interface>
|
563
|
<ipprotocol>inet</ipprotocol>
|
564
|
<tag></tag>
|
565
|
<tagged></tagged>
|
566
|
<max></max>
|
567
|
<max-src-nodes></max-src-nodes>
|
568
|
<max-src-conn></max-src-conn>
|
569
|
<max-src-states></max-src-states>
|
570
|
<statetimeout></statetimeout>
|
571
|
<statetype>keep state</statetype>
|
572
|
<os></os>
|
573
|
<source>
|
574
|
<any></any>
|
575
|
</source>
|
576
|
<destination>
|
577
|
<any></any>
|
578
|
</destination>
|
579
|
<descr></descr>
|
580
|
<updated>
|
581
|
<time>1488701901</time>
|
582
|
<username>admin@192.168.1.2</username>
|
583
|
</updated>
|
584
|
<created>
|
585
|
<time>1488701901</time>
|
586
|
<username>admin@192.168.1.2</username>
|
587
|
</created>
|
588
|
</rule>
|
589
|
<separator>
|
590
|
<opt1></opt1>
|
591
|
<opt2></opt2>
|
592
|
</separator>
|
593
|
</filter>
|
594
|
<shaper></shaper>
|
595
|
<ipsec></ipsec>
|
596
|
<aliases></aliases>
|
597
|
<proxyarp></proxyarp>
|
598
|
<cron>
|
599
|
<item>
|
600
|
<minute>1,31</minute>
|
601
|
<hour>0-5</hour>
|
602
|
<mday>*</mday>
|
603
|
<month>*</month>
|
604
|
<wday>*</wday>
|
605
|
<who>root</who>
|
606
|
<command>/usr/bin/nice -n20 adjkerntz -a</command>
|
607
|
</item>
|
608
|
<item>
|
609
|
<minute>1</minute>
|
610
|
<hour>3</hour>
|
611
|
<mday>1</mday>
|
612
|
<month>*</month>
|
613
|
<wday>*</wday>
|
614
|
<who>root</who>
|
615
|
<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
|
616
|
</item>
|
617
|
<item>
|
618
|
<minute>*/60</minute>
|
619
|
<hour>*</hour>
|
620
|
<mday>*</mday>
|
621
|
<month>*</month>
|
622
|
<wday>*</wday>
|
623
|
<who>root</who>
|
624
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
|
625
|
</item>
|
626
|
<item>
|
627
|
<minute>*/60</minute>
|
628
|
<hour>*</hour>
|
629
|
<mday>*</mday>
|
630
|
<month>*</month>
|
631
|
<wday>*</wday>
|
632
|
<who>root</who>
|
633
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>
|
634
|
</item>
|
635
|
<item>
|
636
|
<minute>1</minute>
|
637
|
<hour>1</hour>
|
638
|
<mday>*</mday>
|
639
|
<month>*</month>
|
640
|
<wday>*</wday>
|
641
|
<who>root</who>
|
642
|
<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
|
643
|
</item>
|
644
|
<item>
|
645
|
<minute>*/60</minute>
|
646
|
<hour>*</hour>
|
647
|
<mday>*</mday>
|
648
|
<month>*</month>
|
649
|
<wday>*</wday>
|
650
|
<who>root</who>
|
651
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
|
652
|
</item>
|
653
|
<item>
|
654
|
<minute>30</minute>
|
655
|
<hour>12</hour>
|
656
|
<mday>*</mday>
|
657
|
<month>*</month>
|
658
|
<wday>*</wday>
|
659
|
<who>root</who>
|
660
|
<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
|
661
|
</item>
|
662
|
</cron>
|
663
|
<wol></wol>
|
664
|
<rrd>
|
665
|
<enable></enable>
|
666
|
</rrd>
|
667
|
<load_balancer>
|
668
|
<monitor_type>
|
669
|
<name>ICMP</name>
|
670
|
<type>icmp</type>
|
671
|
<descr><![CDATA[ICMP]]></descr>
|
672
|
<options></options>
|
673
|
</monitor_type>
|
674
|
<monitor_type>
|
675
|
<name>TCP</name>
|
676
|
<type>tcp</type>
|
677
|
<descr><![CDATA[Generic TCP]]></descr>
|
678
|
<options></options>
|
679
|
</monitor_type>
|
680
|
<monitor_type>
|
681
|
<name>HTTP</name>
|
682
|
<type>http</type>
|
683
|
<descr><![CDATA[Generic HTTP]]></descr>
|
684
|
<options>
|
685
|
<path>/</path>
|
686
|
<host></host>
|
687
|
<code>200</code>
|
688
|
</options>
|
689
|
</monitor_type>
|
690
|
<monitor_type>
|
691
|
<name>HTTPS</name>
|
692
|
<type>https</type>
|
693
|
<descr><![CDATA[Generic HTTPS]]></descr>
|
694
|
<options>
|
695
|
<path>/</path>
|
696
|
<host></host>
|
697
|
<code>200</code>
|
698
|
</options>
|
699
|
</monitor_type>
|
700
|
<monitor_type>
|
701
|
<name>SMTP</name>
|
702
|
<type>send</type>
|
703
|
<descr><![CDATA[Generic SMTP]]></descr>
|
704
|
<options>
|
705
|
<send></send>
|
706
|
<expect>220 *</expect>
|
707
|
</options>
|
708
|
</monitor_type>
|
709
|
</load_balancer>
|
710
|
<widgets>
|
711
|
<sequence>system_information:col1:show,interfaces:col2:show</sequence>
|
712
|
<period>10</period>
|
713
|
</widgets>
|
714
|
<openvpn></openvpn>
|
715
|
<dnshaper></dnshaper>
|
716
|
<unbound>
|
717
|
<dnssec></dnssec>
|
718
|
<active_interface>all</active_interface>
|
719
|
<outgoing_interface>all</outgoing_interface>
|
720
|
<custom_options></custom_options>
|
721
|
<hideidentity></hideidentity>
|
722
|
<hideversion></hideversion>
|
723
|
<dnssecstripped></dnssecstripped>
|
724
|
<port></port>
|
725
|
<regdhcp></regdhcp>
|
726
|
<regdhcpstatic></regdhcpstatic>
|
727
|
<system_domain_local_zone_type>transparent</system_domain_local_zone_type>
|
728
|
<enable></enable>
|
729
|
</unbound>
|
730
|
<revision>
|
731
|
<time>1490748034</time>
|
732
|
<description><![CDATA[admin@10.0.0.114: Firewall: Rules - deleted a firewall rule.]]></description>
|
733
|
<username>admin@10.0.0.114</username>
|
734
|
</revision>
|
735
|
<dyndnses></dyndnses>
|
736
|
<cert>
|
737
|
<refid>5877cff0d49bd</refid>
|
738
|
<descr><![CDATA[webConfigurator default (5877cff0d49bd)]]></descr>
|
739
|
<type>server</type>
|
740
|
<crt>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</crt>
|
741
|
<prv>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</prv>
|
742
|
</cert>
|
743
|
<gateways>
|
744
|
<gateway_item>
|
745
|
<interface>opt2</interface>
|
746
|
<gateway>dynamic</gateway>
|
747
|
<name>WAN_VLAN_DHCP</name>
|
748
|
<weight>1</weight>
|
749
|
<ipprotocol>inet</ipprotocol>
|
750
|
<descr><![CDATA[Interface WAN_VLAN_DHCP Gateway]]></descr>
|
751
|
<defaultgw></defaultgw>
|
752
|
</gateway_item>
|
753
|
<gateway_item>
|
754
|
<interface>opt2</interface>
|
755
|
<gateway>dynamic</gateway>
|
756
|
<name>WAN_VLAN_DHCP6</name>
|
757
|
<weight>1</weight>
|
758
|
<ipprotocol>inet6</ipprotocol>
|
759
|
<descr><![CDATA[Interface WAN_VLAN_DHCP6 Gateway]]></descr>
|
760
|
<monitor>2607:f8b0:4006:803::200e</monitor>
|
761
|
<defaultgw></defaultgw>
|
762
|
</gateway_item>
|
763
|
</gateways>
|
764
|
<ppps></ppps>
|
765
|
<vlans>
|
766
|
<vlan>
|
767
|
<if>cpsw0</if>
|
768
|
<tag>1</tag>
|
769
|
<pcp></pcp>
|
770
|
<descr><![CDATA[LAN traffic]]></descr>
|
771
|
<vlanif>cpsw0_vlan1</vlanif>
|
772
|
</vlan>
|
773
|
<vlan>
|
774
|
<if>cpsw0</if>
|
775
|
<tag>2</tag>
|
776
|
<pcp></pcp>
|
777
|
<descr><![CDATA[WAN traffic]]></descr>
|
778
|
<vlanif>cpsw0_vlan2</vlanif>
|
779
|
</vlan>
|
780
|
<vlan>
|
781
|
<if>cpsw0</if>
|
782
|
<tag>3</tag>
|
783
|
<pcp></pcp>
|
784
|
<descr><![CDATA[TEST traffic]]></descr>
|
785
|
<vlanif>cpsw0_vlan3</vlanif>
|
786
|
</vlan>
|
787
|
<vlan>
|
788
|
<if>cpsw0</if>
|
789
|
<tag>4</tag>
|
790
|
<pcp></pcp>
|
791
|
<descr><![CDATA[GUEST traffic]]></descr>
|
792
|
<vlanif>cpsw0_vlan4</vlanif>
|
793
|
</vlan>
|
794
|
</vlans>
|
795
|
<captiveportal></captiveportal>
|
796
|
</pfsense>
|