|
<?xml version="1.0"?>
|
|
<pfsense>
|
|
<version>16.4</version>
|
|
<lastchange></lastchange>
|
|
<system>
|
|
<optimization>normal</optimization>
|
|
<hostname>router</hostname>
|
|
<domain>nullcompany.com</domain>
|
|
<group>
|
|
<name>all</name>
|
|
<description><![CDATA[All Users]]></description>
|
|
<scope>system</scope>
|
|
<gid>1998</gid>
|
|
<member>0</member>
|
|
</group>
|
|
<group>
|
|
<name>admins</name>
|
|
<description><![CDATA[System Administrators]]></description>
|
|
<scope>system</scope>
|
|
<gid>1999</gid>
|
|
<member>0</member>
|
|
<priv>page-all</priv>
|
|
</group>
|
|
<user>
|
|
<name>admin</name>
|
|
<descr><![CDATA[System Administrator]]></descr>
|
|
<scope>system</scope>
|
|
<groupname>admins</groupname>
|
|
<bcrypt-hash>$2b$10$z4Mmq/C2cx12MjTZ2KIyfuSLb8WP0RforDk6mnmEhYgGjYrnIEYDS</bcrypt-hash>
|
|
<uid>0</uid>
|
|
<priv>user-shell-access</priv>
|
|
</user>
|
|
<nextuid>2000</nextuid>
|
|
<nextgid>2000</nextgid>
|
|
<timeservers>0.pfsense.pool.ntp.org</timeservers>
|
|
<webgui>
|
|
<protocol>http</protocol>
|
|
<loginautocomplete></loginautocomplete>
|
|
<ssl-certref>5877cff0d49bd</ssl-certref>
|
|
<dashboardcolumns>2</dashboardcolumns>
|
|
<webguicss>pfSense.css</webguicss>
|
|
<loginshowhost></loginshowhost>
|
|
<port></port>
|
|
<max_procs>2</max_procs>
|
|
</webgui>
|
|
<disablenatreflection>yes</disablenatreflection>
|
|
<disablesegmentationoffloading></disablesegmentationoffloading>
|
|
<disablelargereceiveoffloading></disablelargereceiveoffloading>
|
|
<ipv6allow></ipv6allow>
|
|
<powerd_ac_mode>hadp</powerd_ac_mode>
|
|
<powerd_battery_mode>hadp</powerd_battery_mode>
|
|
<powerd_normal_mode>hadp</powerd_normal_mode>
|
|
<bogons>
|
|
<interval>monthly</interval>
|
|
</bogons>
|
|
<watchdogd_enable></watchdogd_enable>
|
|
<watchdogd_timeout>128</watchdogd_timeout>
|
|
<enableserial></enableserial>
|
|
<timezone>Etc/UTC</timezone>
|
|
<language>en_US</language>
|
|
<dns1gw>none</dns1gw>
|
|
<dns2gw>none</dns2gw>
|
|
<dns3gw>none</dns3gw>
|
|
<dns4gw>none</dns4gw>
|
|
<serialspeed>115200</serialspeed>
|
|
<enablesshd>enabled</enablesshd>
|
|
<dnsserver>8.8.8.8</dnsserver>
|
|
<dnsallowoverride></dnsallowoverride>
|
|
<crypto_hardware>cryptodev</crypto_hardware>
|
|
</system>
|
|
<interfaces>
|
|
<wan>
|
|
<enable></enable>
|
|
<if>cpsw0</if>
|
|
<blockpriv></blockpriv>
|
|
<blockbogons></blockbogons>
|
|
<descr><![CDATA[RIGHT]]></descr>
|
|
<spoofmac></spoofmac>
|
|
</wan>
|
|
<lan>
|
|
<enable></enable>
|
|
<if>cpsw1</if>
|
|
<descr><![CDATA[LEFT]]></descr>
|
|
<spoofmac></spoofmac>
|
|
<ipaddr>192.168.1.1</ipaddr>
|
|
<subnet>24</subnet>
|
|
</lan>
|
|
<opt1>
|
|
<descr><![CDATA[LAN_VLAN]]></descr>
|
|
<if>cpsw0_vlan1</if>
|
|
<enable></enable>
|
|
<spoofmac></spoofmac>
|
|
<ipaddr>10.0.0.1</ipaddr>
|
|
<subnet>24</subnet>
|
|
<ipaddrv6>track6</ipaddrv6>
|
|
<track6-interface>opt2</track6-interface>
|
|
<track6-prefix-id>1</track6-prefix-id>
|
|
</opt1>
|
|
<opt2>
|
|
<descr><![CDATA[WAN_VLAN]]></descr>
|
|
<if>cpsw0_vlan2</if>
|
|
<enable></enable>
|
|
<spoofmac></spoofmac>
|
|
<alias-address></alias-address>
|
|
<alias-subnet>32</alias-subnet>
|
|
<ipaddr>dhcp</ipaddr>
|
|
<dhcphostname></dhcphostname>
|
|
<dhcprejectfrom></dhcprejectfrom>
|
|
<adv_dhcp_pt_timeout></adv_dhcp_pt_timeout>
|
|
<adv_dhcp_pt_retry></adv_dhcp_pt_retry>
|
|
<adv_dhcp_pt_select_timeout></adv_dhcp_pt_select_timeout>
|
|
<adv_dhcp_pt_reboot></adv_dhcp_pt_reboot>
|
|
<adv_dhcp_pt_backoff_cutoff></adv_dhcp_pt_backoff_cutoff>
|
|
<adv_dhcp_pt_initial_interval></adv_dhcp_pt_initial_interval>
|
|
<adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>
|
|
<adv_dhcp_send_options></adv_dhcp_send_options>
|
|
<adv_dhcp_request_options></adv_dhcp_request_options>
|
|
<adv_dhcp_required_options></adv_dhcp_required_options>
|
|
<adv_dhcp_option_modifiers></adv_dhcp_option_modifiers>
|
|
<adv_dhcp_config_advanced></adv_dhcp_config_advanced>
|
|
<adv_dhcp_config_file_override></adv_dhcp_config_file_override>
|
|
<adv_dhcp_config_file_override_path></adv_dhcp_config_file_override_path>
|
|
<ipaddrv6>dhcp6</ipaddrv6>
|
|
<dhcp6-duid></dhcp6-duid>
|
|
<dhcp6-ia-pd-len>4</dhcp6-ia-pd-len>
|
|
<dhcp6-ia-pd-send-hint></dhcp6-ia-pd-send-hint>
|
|
<dhcp6debug></dhcp6debug>
|
|
<dhcp6withoutra></dhcp6withoutra>
|
|
<dhcp6norelease></dhcp6norelease>
|
|
<adv_dhcp6_prefix_interface_statement_sla_len>4</adv_dhcp6_prefix_interface_statement_sla_len>
|
|
</opt2>
|
|
<opt3>
|
|
<descr><![CDATA[TEST_VLAN]]></descr>
|
|
<if>cpsw0_vlan3</if>
|
|
<enable></enable>
|
|
<spoofmac></spoofmac>
|
|
<ipaddr>10.255.0.1</ipaddr>
|
|
<subnet>24</subnet>
|
|
</opt3>
|
|
<opt4>
|
|
<descr><![CDATA[GUEST_VLAN]]></descr>
|
|
<if>cpsw0_vlan4</if>
|
|
<enable></enable>
|
|
<spoofmac></spoofmac>
|
|
<ipaddr>10.0.100.1</ipaddr>
|
|
<subnet>24</subnet>
|
|
</opt4>
|
|
</interfaces>
|
|
<staticroutes></staticroutes>
|
|
<dhcpd>
|
|
<lan>
|
|
<range>
|
|
<from>192.168.1.10</from>
|
|
<to>192.168.1.12</to>
|
|
</range>
|
|
<dhcpleaseinlocaltime></dhcpleaseinlocaltime>
|
|
<failover_peerip></failover_peerip>
|
|
<defaultleasetime></defaultleasetime>
|
|
<maxleasetime></maxleasetime>
|
|
<netmask></netmask>
|
|
<dnsserver>192.168.1.1</dnsserver>
|
|
<gateway></gateway>
|
|
<domain></domain>
|
|
<domainsearchlist></domainsearchlist>
|
|
<ddnsdomain></ddnsdomain>
|
|
<ddnsdomainprimary></ddnsdomainprimary>
|
|
<ddnsdomainkeyname></ddnsdomainkeyname>
|
|
<ddnsdomainkey></ddnsdomainkey>
|
|
<mac_allow></mac_allow>
|
|
<mac_deny></mac_deny>
|
|
<tftp></tftp>
|
|
<ldap></ldap>
|
|
<nextserver></nextserver>
|
|
<filename></filename>
|
|
<filename32></filename32>
|
|
<filename64></filename64>
|
|
<rootpath></rootpath>
|
|
<numberoptions></numberoptions>
|
|
</lan>
|
|
<opt1>
|
|
<range>
|
|
<from>10.0.0.100</from>
|
|
<to>10.0.0.199</to>
|
|
</range>
|
|
<enable></enable>
|
|
<failover_peerip></failover_peerip>
|
|
<defaultleasetime></defaultleasetime>
|
|
<maxleasetime></maxleasetime>
|
|
<netmask></netmask>
|
|
<gateway></gateway>
|
|
<domain></domain>
|
|
<domainsearchlist></domainsearchlist>
|
|
<ddnsdomain></ddnsdomain>
|
|
<ddnsdomainprimary></ddnsdomainprimary>
|
|
<ddnsdomainkeyname></ddnsdomainkeyname>
|
|
<ddnsdomainkey></ddnsdomainkey>
|
|
<mac_allow></mac_allow>
|
|
<mac_deny></mac_deny>
|
|
<tftp></tftp>
|
|
<ldap></ldap>
|
|
<nextserver></nextserver>
|
|
<filename></filename>
|
|
<filename32></filename32>
|
|
<filename64></filename64>
|
|
<rootpath></rootpath>
|
|
<numberoptions></numberoptions>
|
|
<dhcpleaseinlocaltime></dhcpleaseinlocaltime>
|
|
<dnsserver>10.0.0.1</dnsserver>
|
|
</opt1>
|
|
</dhcpd>
|
|
<dhcpdv6>
|
|
<lan>
|
|
<range>
|
|
<from>::1000</from>
|
|
<to>::2000</to>
|
|
</range>
|
|
<ramode>assist</ramode>
|
|
<rapriority>medium</rapriority>
|
|
</lan>
|
|
<opt1>
|
|
<ramode>unmanaged</ramode>
|
|
<rapriority>medium</rapriority>
|
|
<rainterface></rainterface>
|
|
<ravalidlifetime></ravalidlifetime>
|
|
<rapreferredlifetime></rapreferredlifetime>
|
|
<raminrtradvinterval></raminrtradvinterval>
|
|
<ramaxrtradvinterval></ramaxrtradvinterval>
|
|
<raadvdefaultlifetime></raadvdefaultlifetime>
|
|
<radomainsearchlist></radomainsearchlist>
|
|
<rasamednsasdhcp6></rasamednsasdhcp6>
|
|
<range>
|
|
<from>::ffff:ffff:ffff:ff00</from>
|
|
<to>::ffff:ffff:ffff:fffe</to>
|
|
</range>
|
|
<prefixrange>
|
|
<from></from>
|
|
<to></to>
|
|
<prefixlength>48</prefixlength>
|
|
</prefixrange>
|
|
<defaultleasetime></defaultleasetime>
|
|
<maxleasetime></maxleasetime>
|
|
<netmask></netmask>
|
|
<domain></domain>
|
|
<domainsearchlist></domainsearchlist>
|
|
<ddnsdomain></ddnsdomain>
|
|
<ddnsdomainprimary></ddnsdomainprimary>
|
|
<ddnsdomainkeyname></ddnsdomainkeyname>
|
|
<ddnsdomainkey></ddnsdomainkey>
|
|
<ddnsclientupdates>allow</ddnsclientupdates>
|
|
<tftp></tftp>
|
|
<ldap></ldap>
|
|
<bootfile_url></bootfile_url>
|
|
<dhcpv6leaseinlocaltime></dhcpv6leaseinlocaltime>
|
|
<numberoptions></numberoptions>
|
|
</opt1>
|
|
</dhcpdv6>
|
|
<snmpd>
|
|
<syslocation></syslocation>
|
|
<syscontact></syscontact>
|
|
<rocommunity>public</rocommunity>
|
|
</snmpd>
|
|
<diag>
|
|
<ipv6nat>
|
|
<ipaddr></ipaddr>
|
|
</ipv6nat>
|
|
</diag>
|
|
<syslog>
|
|
<nentries>500</nentries>
|
|
<sourceip></sourceip>
|
|
<ipproto>ipv4</ipproto>
|
|
<reverse></reverse>
|
|
</syslog>
|
|
<nat>
|
|
<outbound>
|
|
<mode>hybrid</mode>
|
|
<rule>
|
|
<source>
|
|
<network>any</network>
|
|
</source>
|
|
<sourceport></sourceport>
|
|
<descr></descr>
|
|
<target></target>
|
|
<targetip></targetip>
|
|
<targetip_subnet></targetip_subnet>
|
|
<interface>opt1</interface>
|
|
<poolopts></poolopts>
|
|
<source_hash_key></source_hash_key>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
<updated>
|
|
<time>1489596225</time>
|
|
<username>admin@10.0.0.155</username>
|
|
</updated>
|
|
<created>
|
|
<time>1489596225</time>
|
|
<username>admin@10.0.0.155</username>
|
|
</created>
|
|
</rule>
|
|
</outbound>
|
|
</nat>
|
|
<filter>
|
|
<rule>
|
|
<type>pass</type>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<descr><![CDATA[Default allow LAN to any rule]]></descr>
|
|
<interface>lan</interface>
|
|
<tracker>0100000101</tracker>
|
|
<source>
|
|
<network>lan</network>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
</rule>
|
|
<rule>
|
|
<type>pass</type>
|
|
<ipprotocol>inet6</ipprotocol>
|
|
<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
|
|
<interface>lan</interface>
|
|
<tracker>0100000102</tracker>
|
|
<source>
|
|
<network>lan</network>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1489596364</tracker>
|
|
<type>pass</type>
|
|
<interface>opt1</interface>
|
|
<ipprotocol>inet46</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
<descr></descr>
|
|
<updated>
|
|
<time>1489596364</time>
|
|
<username>admin@10.0.0.155</username>
|
|
</updated>
|
|
<created>
|
|
<time>1489596364</time>
|
|
<username>admin@10.0.0.155</username>
|
|
</created>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1489595757</tracker>
|
|
<type>pass</type>
|
|
<interface>opt1</interface>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<protocol>tcp/udp</protocol>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
<port>53</port>
|
|
</destination>
|
|
<descr></descr>
|
|
<updated>
|
|
<time>1489595757</time>
|
|
<username>admin@10.0.0.155</username>
|
|
</updated>
|
|
<created>
|
|
<time>1489595757</time>
|
|
<username>admin@10.0.0.155</username>
|
|
</created>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1488702715</tracker>
|
|
<type>pass</type>
|
|
<interface>opt1</interface>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<protocol>tcp</protocol>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
<port>80</port>
|
|
</destination>
|
|
<descr></descr>
|
|
<updated>
|
|
<time>1488702715</time>
|
|
<username>admin@192.168.1.2</username>
|
|
</updated>
|
|
<created>
|
|
<time>1488702715</time>
|
|
<username>admin@192.168.1.2</username>
|
|
</created>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1488702216</tracker>
|
|
<type>pass</type>
|
|
<interface>opt1</interface>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<protocol>tcp</protocol>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
<port>22</port>
|
|
</destination>
|
|
<descr></descr>
|
|
<updated>
|
|
<time>1488702216</time>
|
|
<username>admin@192.168.1.2</username>
|
|
</updated>
|
|
<created>
|
|
<time>1488702216</time>
|
|
<username>admin@192.168.1.2</username>
|
|
</created>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1490746517</tracker>
|
|
<type>pass</type>
|
|
<interface>opt2</interface>
|
|
<ipprotocol>inet6</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<protocol>icmp</protocol>
|
|
<icmptype>any</icmptype>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
<log></log>
|
|
<descr><![CDATA[ICMPv6]]></descr>
|
|
<updated>
|
|
<time>1490746517</time>
|
|
<username>admin@10.0.0.114</username>
|
|
</updated>
|
|
<created>
|
|
<time>1490746517</time>
|
|
<username>admin@10.0.0.114</username>
|
|
</created>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1489619637</tracker>
|
|
<type>reject</type>
|
|
<interface>opt2</interface>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<protocol>tcp</protocol>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<network>opt2ip</network>
|
|
<port>22</port>
|
|
</destination>
|
|
<log></log>
|
|
<descr><![CDATA[SSH-HACKERS]]></descr>
|
|
<updated>
|
|
<time>1489619637</time>
|
|
<username>admin@10.0.0.105</username>
|
|
</updated>
|
|
<created>
|
|
<time>1489619637</time>
|
|
<username>admin@10.0.0.105</username>
|
|
</created>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1489605041</tracker>
|
|
<type>pass</type>
|
|
<interface>opt2</interface>
|
|
<ipprotocol>inet6</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
<descr></descr>
|
|
<created>
|
|
<time>1489605041</time>
|
|
<username>admin@10.0.0.105</username>
|
|
</created>
|
|
<updated>
|
|
<time>1490746486</time>
|
|
<username>admin@10.0.0.114</username>
|
|
</updated>
|
|
</rule>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1488701901</tracker>
|
|
<type>pass</type>
|
|
<interface>opt2</interface>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype>keep state</statetype>
|
|
<os></os>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
<descr></descr>
|
|
<updated>
|
|
<time>1488701901</time>
|
|
<username>admin@192.168.1.2</username>
|
|
</updated>
|
|
<created>
|
|
<time>1488701901</time>
|
|
<username>admin@192.168.1.2</username>
|
|
</created>
|
|
</rule>
|
|
<separator>
|
|
<opt1></opt1>
|
|
<opt2></opt2>
|
|
</separator>
|
|
</filter>
|
|
<shaper></shaper>
|
|
<ipsec></ipsec>
|
|
<aliases></aliases>
|
|
<proxyarp></proxyarp>
|
|
<cron>
|
|
<item>
|
|
<minute>1,31</minute>
|
|
<hour>0-5</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 adjkerntz -a</command>
|
|
</item>
|
|
<item>
|
|
<minute>1</minute>
|
|
<hour>3</hour>
|
|
<mday>1</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
|
|
</item>
|
|
<item>
|
|
<minute>*/60</minute>
|
|
<hour>*</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
|
|
</item>
|
|
<item>
|
|
<minute>*/60</minute>
|
|
<hour>*</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>
|
|
</item>
|
|
<item>
|
|
<minute>1</minute>
|
|
<hour>1</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
|
|
</item>
|
|
<item>
|
|
<minute>*/60</minute>
|
|
<hour>*</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
|
|
</item>
|
|
<item>
|
|
<minute>30</minute>
|
|
<hour>12</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
|
|
</item>
|
|
</cron>
|
|
<wol></wol>
|
|
<rrd>
|
|
<enable></enable>
|
|
</rrd>
|
|
<load_balancer>
|
|
<monitor_type>
|
|
<name>ICMP</name>
|
|
<type>icmp</type>
|
|
<descr><![CDATA[ICMP]]></descr>
|
|
<options></options>
|
|
</monitor_type>
|
|
<monitor_type>
|
|
<name>TCP</name>
|
|
<type>tcp</type>
|
|
<descr><![CDATA[Generic TCP]]></descr>
|
|
<options></options>
|
|
</monitor_type>
|
|
<monitor_type>
|
|
<name>HTTP</name>
|
|
<type>http</type>
|
|
<descr><![CDATA[Generic HTTP]]></descr>
|
|
<options>
|
|
<path>/</path>
|
|
<host></host>
|
|
<code>200</code>
|
|
</options>
|
|
</monitor_type>
|
|
<monitor_type>
|
|
<name>HTTPS</name>
|
|
<type>https</type>
|
|
<descr><![CDATA[Generic HTTPS]]></descr>
|
|
<options>
|
|
<path>/</path>
|
|
<host></host>
|
|
<code>200</code>
|
|
</options>
|
|
</monitor_type>
|
|
<monitor_type>
|
|
<name>SMTP</name>
|
|
<type>send</type>
|
|
<descr><![CDATA[Generic SMTP]]></descr>
|
|
<options>
|
|
<send></send>
|
|
<expect>220 *</expect>
|
|
</options>
|
|
</monitor_type>
|
|
</load_balancer>
|
|
<widgets>
|
|
<sequence>system_information:col1:show,interfaces:col2:show</sequence>
|
|
<period>10</period>
|
|
</widgets>
|
|
<openvpn></openvpn>
|
|
<dnshaper></dnshaper>
|
|
<unbound>
|
|
<dnssec></dnssec>
|
|
<active_interface>all</active_interface>
|
|
<outgoing_interface>all</outgoing_interface>
|
|
<custom_options></custom_options>
|
|
<hideidentity></hideidentity>
|
|
<hideversion></hideversion>
|
|
<dnssecstripped></dnssecstripped>
|
|
<port></port>
|
|
<regdhcp></regdhcp>
|
|
<regdhcpstatic></regdhcpstatic>
|
|
<system_domain_local_zone_type>transparent</system_domain_local_zone_type>
|
|
<enable></enable>
|
|
</unbound>
|
|
<revision>
|
|
<time>1490748034</time>
|
|
<description><![CDATA[admin@10.0.0.114: Firewall: Rules - deleted a firewall rule.]]></description>
|
|
<username>admin@10.0.0.114</username>
|
|
</revision>
|
|
<dyndnses></dyndnses>
|
|
<cert>
|
|
<refid>5877cff0d49bd</refid>
|
|
<descr><![CDATA[webConfigurator default (5877cff0d49bd)]]></descr>
|
|
<type>server</type>
|
|
<crt>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</crt>
|
|
<prv>LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUV2Z0lCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQktnd2dnU2tBZ0VBQW9JQkFRRFRVYmFuRCtHMUtuZm4KTzFZMDJ0SCt6K1h6OUpJS2ZwR0hKdTZNcTl1aU83S1E5eG9tRkN1cXhncXpuR29SS3gwTTlhZ21ibWdFR2dzQQpJc29qZElJOGJ2aGRZdTI3VDlOeGdLRHlxVkZuMTlnSXhwMXNPWGsyTnB6d3BzSWdJWTN6Q3paOUM4RTh6c0NDCnBFT1F3c05jejAxazhDbDJQNHVJQ2gxdUhvRXFmV0pCUE8wSk9tTFVjdFFud0xFK2MyRTRWWHJjZDBxM1ErQjIKaTlJNTY3eE9ySEVRK3VZemVPNGZudk1ueVQ5MWZCL21tcUJramdnWStMUzFVVm9kdVVtbmxNUFNlZTIxNGsrWgpDY3VBMFhPTXdwSWducGY1WjN3eDVRVEtNZ3ZxcXNwZ2dlZlp5a1k0aEptSGF1aEUxOVJ3WklQZGtzZVo1ZXl5ClZDWmFya0xmQWdNQkFBRUNnZ0VCQUx5RTcyL0dxVk1YMmZQOWFZQ3BuaUcya3F5NmlQYTN4MWhORVErSjJkeTMKYVN3T1pkT0d0eFlZcXo5azBQTVVCVXlrY3lnbDRzR1dBaTVTMndZYVVIMWRlbERGaXRSSitKWVBiSVpQS3dKNgorbzJKc3JMejZ3REVZK29FdXJZemVSRlQ5WDVFMkZWSkZWRDIvaGZNeU1DcFo2QWU2TDVISGxGMHhLQ1NzaVNXCks3WU1WUm9BSUJlQXhyZEY2WEhmOHlDQVdOV3lnNytueVFCclJSeHVpcUNjdlhYUkZXc3JRZW5KR1VONUJiRFAKRGR2d0hKeUkyVVRWSkduQ1ZkYmRKT3JzZGpZRGd1SXRhYTlrSzgyT2NzYkJ1eEl0eE1ScHVzZHh5WVRlcjBiNgpWRnBDclhwUzB6QXlJUHhGVmFrbHFNU2FEbG9Ld3VubGowbkVkUkJHbXpFQ2dZRUE4QzJwdWR5dXVXRGRtK3NjCkhiWlNsUXBYTDNyVEVuVExzNWJoQzlXc21KKzgvU0Uzd3VOd1YzTzkxTGgwZEZ5YmVBRnZxYVdQcmdlTXhWL20Kbk9IY21FRnVoUTBRSS9QY0p4cUVKaHJJT1M0NG5XTFNIRjJvTDJqUERhQzYxMUwybFJoQ2pSekFFekJTV0NOKwp1RkEvS0NsaFB4dmhMb2JOSzcrSStYdFRXT3NDZ1lFQTRUMWZnRDZ4cEVCWExybndRd2xJUjQ3cGNBbjV5ZjhsCld2WkxhU3dXaTRWL3VsVmV0cUprYmZzVFJwTlV0OXU0KzVEdXBFU0dyMmliVlJJNEwzdnZOT290RWlScHNCZUMKdys1MUlpdzRRTHNEVXJ1dEE1Uy9nVUR2U2hLUWlobUJXVjQvOS9ZWGd6RHlXVWw3cnZ4VS9SMDh1SGNsdVN6NwpJYThGeUtTUGdOMENnWUJMQjJqRENCNkpDS3FSLzZOYjRNM3hnelp6UGFKY1hLSVo2eU5JYUNxdnp3N2g0Sk9qCnpSc1dKckVCbDlIQlhBQ3hQM21iZkgzaTlyYlNIY0JUOS9iS2xYNHFFRWVmZzVtZG1abjRzVnNsQ2J4ajVqQU8KN204UXlHUU9OTXpKWVVCb21SaUpMcGNPSjRWQnhXemJ0UzNWcFArZEVGK0xBazlyd0R6USt1YXhtd0tCZ0ZrVgpMUEJMMjNaYS9DQSs2Z2VaWkR6cENPcUhCNFFjcFdtVWY3N1k4Ukc5ZXdiM1BMNSsrN21EMDl2VjZXdk9PeHRECjl4NkErOFBrVzRzSjZhN2VGWDJZSUx0TUs0QzV5NzR5VWFGeVc4MCtLZEpPNTk3Q3Rmc284M3NZWEpKQ0JDYVUKWURoeDNGckd3Uk1QUFJ1NE1PVHE2MWtKeHFHMmFKeXAzRisrdGdNQkFvR0JBSTNaNGJpbUp0VXZyL2VDZVQzRQprS1hnM3FyMHdvc2ZOdU1EMFJjaXJ1Y3EweE1VNFlOTWFJVXJuQjl0TDJXZERZMy9NaGxYQm8xM1lqRHB4ckNxClVtTFVsWmFPdWhCUGlDUy9UYkpZdVZsTERYSHJTMTV2L2xFU29BM3k2RU9hdHBMYmY5VHlpaXlUcTduWENyaHAKMU9laHAwS0o3N2FzTHlkNUhRZXp5RUlICi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0K</prv>
|
|
</cert>
|
|
<gateways>
|
|
<gateway_item>
|
|
<interface>opt2</interface>
|
|
<gateway>dynamic</gateway>
|
|
<name>WAN_VLAN_DHCP</name>
|
|
<weight>1</weight>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<descr><![CDATA[Interface WAN_VLAN_DHCP Gateway]]></descr>
|
|
<defaultgw></defaultgw>
|
|
</gateway_item>
|
|
<gateway_item>
|
|
<interface>opt2</interface>
|
|
<gateway>dynamic</gateway>
|
|
<name>WAN_VLAN_DHCP6</name>
|
|
<weight>1</weight>
|
|
<ipprotocol>inet6</ipprotocol>
|
|
<descr><![CDATA[Interface WAN_VLAN_DHCP6 Gateway]]></descr>
|
|
<monitor>2607:f8b0:4006:803::200e</monitor>
|
|
<defaultgw></defaultgw>
|
|
</gateway_item>
|
|
</gateways>
|
|
<ppps></ppps>
|
|
<vlans>
|
|
<vlan>
|
|
<if>cpsw0</if>
|
|
<tag>1</tag>
|
|
<pcp></pcp>
|
|
<descr><![CDATA[LAN traffic]]></descr>
|
|
<vlanif>cpsw0_vlan1</vlanif>
|
|
</vlan>
|
|
<vlan>
|
|
<if>cpsw0</if>
|
|
<tag>2</tag>
|
|
<pcp></pcp>
|
|
<descr><![CDATA[WAN traffic]]></descr>
|
|
<vlanif>cpsw0_vlan2</vlanif>
|
|
</vlan>
|
|
<vlan>
|
|
<if>cpsw0</if>
|
|
<tag>3</tag>
|
|
<pcp></pcp>
|
|
<descr><![CDATA[TEST traffic]]></descr>
|
|
<vlanif>cpsw0_vlan3</vlanif>
|
|
</vlan>
|
|
<vlan>
|
|
<if>cpsw0</if>
|
|
<tag>4</tag>
|
|
<pcp></pcp>
|
|
<descr><![CDATA[GUEST traffic]]></descr>
|
|
<vlanif>cpsw0_vlan4</vlanif>
|
|
</vlan>
|
|
</vlans>
|
|
<captiveportal></captiveportal>
|
|
</pfsense>
|