1
|
<?xml version="1.0"?>
|
2
|
<pfsense>
|
3
|
<version>3.0</version>
|
4
|
<lastchange/>
|
5
|
<theme>pfsense</theme>
|
6
|
<system>
|
7
|
<optimization>normal</optimization>
|
8
|
<schedulertype>priq</schedulertype>
|
9
|
<hostname>routera</hostname>
|
10
|
<domain>dea.example.net</domain>
|
11
|
<username>admin</username>
|
12
|
<password>zzz</password>
|
13
|
<timezone>Europe/Berlin</timezone>
|
14
|
<time-update-interval/>
|
15
|
<timeservers>de.pool.ntp.org</timeservers>
|
16
|
<webgui>
|
17
|
<protocol>http</protocol>
|
18
|
<port/>
|
19
|
<certificate/>
|
20
|
<private-key/>
|
21
|
</webgui>
|
22
|
<disablenatreflection>yes</disablenatreflection>
|
23
|
<ssh>
|
24
|
<authorizedkeys/>
|
25
|
<port/>
|
26
|
</ssh>
|
27
|
<maximumstates/>
|
28
|
<shapertype/>
|
29
|
<enablesshd>yes</enablesshd>
|
30
|
<rfc959workaround>enabled</rfc959workaround>
|
31
|
<dnsallowoverride/>
|
32
|
</system>
|
33
|
<interfaces>
|
34
|
<lan>
|
35
|
<if>em0</if>
|
36
|
<ipaddr>10.49.0.1</ipaddr>
|
37
|
<subnet>24</subnet>
|
38
|
<media/>
|
39
|
<mediaopt/>
|
40
|
<bandwidth>100</bandwidth>
|
41
|
<bandwidthtype>Mb</bandwidthtype>
|
42
|
</lan>
|
43
|
<wan>
|
44
|
<if>em6</if>
|
45
|
<mtu>1452</mtu>
|
46
|
<media/>
|
47
|
<mediaopt/>
|
48
|
<bandwidth>100</bandwidth>
|
49
|
<bandwidthtype>Mb</bandwidthtype>
|
50
|
<spoofmac/>
|
51
|
<blockpriv/>
|
52
|
<pppoe>
|
53
|
<pppoe-reset-type>custom</pppoe-reset-type>
|
54
|
</pppoe>
|
55
|
<disableftpproxy/>
|
56
|
<ipaddr>pppoe</ipaddr>
|
57
|
</wan>
|
58
|
<opt1>
|
59
|
<descr>LAN1</descr>
|
60
|
<if>em1</if>
|
61
|
<bridge/>
|
62
|
<enable/>
|
63
|
<ipaddr>10.49.1.1</ipaddr>
|
64
|
<subnet>24</subnet>
|
65
|
<gateway/>
|
66
|
<spoofmac/>
|
67
|
<mtu/>
|
68
|
</opt1>
|
69
|
<opt2>
|
70
|
<descr>WAN2</descr>
|
71
|
<if>em5</if>
|
72
|
<bridge/>
|
73
|
<ipaddr>dhcp</ipaddr>
|
74
|
<subnet>32</subnet>
|
75
|
<gateway/>
|
76
|
<spoofmac/>
|
77
|
<mtu/>
|
78
|
<enable/>
|
79
|
<disableftpproxy/>
|
80
|
<dhcphostname/>
|
81
|
</opt2>
|
82
|
</interfaces>
|
83
|
<staticroutes>
|
84
|
<route>
|
85
|
<interface>opt1</interface>
|
86
|
<network>10.49.11.0/24</network>
|
87
|
<gateway>10.49.1.111</gateway>
|
88
|
<descr>Wireless I</descr>
|
89
|
</route>
|
90
|
<route>
|
91
|
<interface>opt1</interface>
|
92
|
<network>10.49.12.0/24</network>
|
93
|
<gateway>10.49.1.112</gateway>
|
94
|
<descr>Wireless II</descr>
|
95
|
</route>
|
96
|
<route>
|
97
|
<interface>opt1</interface>
|
98
|
<network>10.49.13.0/24</network>
|
99
|
<gateway>10.49.1.113</gateway>
|
100
|
<descr>Wireless III</descr>
|
101
|
</route>
|
102
|
<route>
|
103
|
<interface>lan</interface>
|
104
|
<network>10.49.2.0/24</network>
|
105
|
<gateway>10.49.1.21</gateway>
|
106
|
<descr>VMs</descr>
|
107
|
</route>
|
108
|
</staticroutes>
|
109
|
<pppoe>
|
110
|
<username>yyy</username>
|
111
|
<password>xxx</password>
|
112
|
<provider/>
|
113
|
<timeout/>
|
114
|
</pppoe>
|
115
|
<pptp>
|
116
|
<username/>
|
117
|
<password/>
|
118
|
<local/>
|
119
|
<subnet/>
|
120
|
<remote/>
|
121
|
<timeout/>
|
122
|
</pptp>
|
123
|
<bigpond>
|
124
|
<username/>
|
125
|
<password/>
|
126
|
<authserver/>
|
127
|
<authdomain/>
|
128
|
<minheartbeatinterval/>
|
129
|
</bigpond>
|
130
|
<dyndns></dyndns>
|
131
|
<dhcpd>
|
132
|
<lan>
|
133
|
<enable/>
|
134
|
<range>
|
135
|
<from>10.49.0.10</from>
|
136
|
<to>10.49.0.99</to>
|
137
|
</range>
|
138
|
<defaultleasetime/>
|
139
|
<maxleasetime/>
|
140
|
<netmask/>
|
141
|
<failover_peerip/>
|
142
|
<gateway/>
|
143
|
<ddnsdomain/>
|
144
|
<next-server/>
|
145
|
<filename/>
|
146
|
</lan>
|
147
|
<opt1>
|
148
|
<range>
|
149
|
<from>10.49.1.100</from>
|
150
|
<to>10.49.1.150</to>
|
151
|
</range>
|
152
|
<defaultleasetime>172800</defaultleasetime>
|
153
|
<maxleasetime>2592000</maxleasetime>
|
154
|
<netmask/>
|
155
|
<failover_peerip/>
|
156
|
<gateway/>
|
157
|
<enable/>
|
158
|
<ddnsdomain/>
|
159
|
<next-server/>
|
160
|
<filename/>
|
161
|
<winsserver>10.49.1.20</winsserver>
|
162
|
<ntpserver>10.49.1.1</ntpserver>
|
163
|
</opt1>
|
164
|
</dhcpd>
|
165
|
<pptpd>
|
166
|
<mode/>
|
167
|
<redir/>
|
168
|
<localip/>
|
169
|
<remoteip/>
|
170
|
</pptpd>
|
171
|
<ovpn/>
|
172
|
<dnsmasq>
|
173
|
<enable/>
|
174
|
<regdhcp/>
|
175
|
<regdhcpstatic/>
|
176
|
<hosts>
|
177
|
<host>hub</host>
|
178
|
<domain>dea.example.net</domain>
|
179
|
<ip>10.49.1.1</ip>
|
180
|
<descr/>
|
181
|
</hosts>
|
182
|
<hosts>
|
183
|
<host>nas</host>
|
184
|
<domain>dea.example.net</domain>
|
185
|
<ip>10.49.1.11</ip>
|
186
|
<descr>NAS</descr>
|
187
|
</hosts>
|
188
|
<hosts>
|
189
|
<host>nasa</host>
|
190
|
<domain>dea.example.net</domain>
|
191
|
<ip>10.49.1.11</ip>
|
192
|
<descr>NAS (Master)</descr>
|
193
|
</hosts>
|
194
|
<hosts>
|
195
|
<host>nasb</host>
|
196
|
<domain>dea.example.net</domain>
|
197
|
<ip>10.49.1.12</ip>
|
198
|
<descr>NAS (Backup)</descr>
|
199
|
</hosts>
|
200
|
<hosts>
|
201
|
<host>servera</host>
|
202
|
<domain>dea.example.net</domain>
|
203
|
<ip>10.49.1.20</ip>
|
204
|
<descr>UCS</descr>
|
205
|
</hosts>
|
206
|
<domainoverrides>
|
207
|
<domain>dea.example.net</domain>
|
208
|
<ip>10.49.1.1</ip>
|
209
|
<descr>Local domain</descr>
|
210
|
</domainoverrides>
|
211
|
</dnsmasq>
|
212
|
<snmpd>
|
213
|
<syslocation/>
|
214
|
<syscontact/>
|
215
|
<rocommunity>public</rocommunity>
|
216
|
</snmpd>
|
217
|
<diag>
|
218
|
<ipv6nat/>
|
219
|
</diag>
|
220
|
<bridge/>
|
221
|
<syslog/>
|
222
|
<nat>
|
223
|
<ipsecpassthru>
|
224
|
<enable/>
|
225
|
</ipsecpassthru>
|
226
|
</nat>
|
227
|
<filter> </filter>
|
228
|
<shaper> </shaper>
|
229
|
<ipsec>
|
230
|
<preferredoldsa/>
|
231
|
</ipsec>
|
232
|
<aliases>
|
233
|
<alias>
|
234
|
<name>dnsports</name>
|
235
|
<address>53</address>
|
236
|
<descr>DNS ports</descr>
|
237
|
<type>port</type>
|
238
|
<detail>Entry added Fri, 02 Jul 2010 13:06:39 +0200||</detail>
|
239
|
</alias>
|
240
|
<alias>
|
241
|
<name>localnets</name>
|
242
|
<address>10.49.0.0/16</address>
|
243
|
<descr>Used local subnets</descr>
|
244
|
<type>network</type>
|
245
|
<detail>Entry added Fri, 02 Jul 2010 12:58:53 +0200||</detail>
|
246
|
</alias>
|
247
|
<alias>
|
248
|
<name>msports</name>
|
249
|
<address>135:139 445</address>
|
250
|
<descr>NetBIOS and DCOM ports</descr>
|
251
|
<type>port</type>
|
252
|
<detail>Entry added Fri, 02 Jul 2010 13:01:05 +0200||Entry added Fri, 02 Jul 2010 13:01:05 +0200||</detail>
|
253
|
</alias>
|
254
|
<alias>
|
255
|
<name>spstcpports</name>
|
256
|
<address>7777</address>
|
257
|
<descr>SPS ports</descr>
|
258
|
<type>port</type>
|
259
|
<detail>Entry added Fri, 02 Jul 2010 13:05:24 +0200||</detail>
|
260
|
</alias>
|
261
|
<alias>
|
262
|
<name>spsudpports</name>
|
263
|
<address>25342:25343</address>
|
264
|
<descr>SPS ports</descr>
|
265
|
<type>port</type>
|
266
|
<detail>Entry added Fri, 02 Jul 2010 13:05:51 +0200||</detail>
|
267
|
</alias>
|
268
|
<alias>
|
269
|
<name>sshports</name>
|
270
|
<address>22</address>
|
271
|
<descr>SSH ports</descr>
|
272
|
<type>port</type>
|
273
|
<detail>Entry added Fri, 02 Jul 2010 13:02:22 +0200||</detail>
|
274
|
</alias>
|
275
|
<alias>
|
276
|
<name>teredoports</name>
|
277
|
<address>3544</address>
|
278
|
<descr>Teredo IPv6 tunneling</descr>
|
279
|
<type>port</type>
|
280
|
<detail>Entry added Thu, 03 Feb 2011 10:28:31 +0100||</detail>
|
281
|
</alias>
|
282
|
<alias>
|
283
|
<name>vncports</name>
|
284
|
<address>5900</address>
|
285
|
<descr>VNC ports</descr>
|
286
|
<type>port</type>
|
287
|
<detail>Entry added Fri, 02 Jul 2010 13:06:15 +0200||</detail>
|
288
|
</alias>
|
289
|
<alias>
|
290
|
<name>vpnudpports</name>
|
291
|
<address>1194</address>
|
292
|
<descr>OpenVPN ports</descr>
|
293
|
<type>port</type>
|
294
|
<detail>OpenVPN||</detail>
|
295
|
</alias>
|
296
|
</aliases>
|
297
|
<proxyarp/>
|
298
|
<wol/>
|
299
|
<cron>
|
300
|
<item>
|
301
|
<minute>0</minute>
|
302
|
<hour>*</hour>
|
303
|
<mday>*</mday>
|
304
|
<month>*</month>
|
305
|
<wday>*</wday>
|
306
|
<who>root</who>
|
307
|
<command>/usr/bin/nice -n20 newsyslog</command>
|
308
|
</item>
|
309
|
<item>
|
310
|
<minute>1,31</minute>
|
311
|
<hour>0-5</hour>
|
312
|
<mday>*</mday>
|
313
|
<month>*</month>
|
314
|
<wday>*</wday>
|
315
|
<who>root</who>
|
316
|
<command>/usr/bin/nice -n20 adjkerntz -a</command>
|
317
|
</item>
|
318
|
<item>
|
319
|
<minute>1</minute>
|
320
|
<hour>3</hour>
|
321
|
<mday>1</mday>
|
322
|
<month>*</month>
|
323
|
<wday>*</wday>
|
324
|
<who>root</who>
|
325
|
<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
|
326
|
</item>
|
327
|
<item>
|
328
|
<minute>*/60</minute>
|
329
|
<hour>*</hour>
|
330
|
<mday>*</mday>
|
331
|
<month>*</month>
|
332
|
<wday>*</wday>
|
333
|
<who>root</who>
|
334
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
|
335
|
</item>
|
336
|
<item>
|
337
|
<minute>1</minute>
|
338
|
<hour>1</hour>
|
339
|
<mday>*</mday>
|
340
|
<month>*</month>
|
341
|
<wday>*</wday>
|
342
|
<who>root</who>
|
343
|
<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
|
344
|
</item>
|
345
|
<item>
|
346
|
<minute>*/60</minute>
|
347
|
<hour>*</hour>
|
348
|
<mday>*</mday>
|
349
|
<month>*</month>
|
350
|
<wday>*</wday>
|
351
|
<who>root</who>
|
352
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
|
353
|
</item>
|
354
|
<item>
|
355
|
<minute>*/60</minute>
|
356
|
<hour>*</hour>
|
357
|
<mday>*</mday>
|
358
|
<month>*</month>
|
359
|
<wday>*</wday>
|
360
|
<who>root</who>
|
361
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -t 3600 snort2c</command>
|
362
|
</item>
|
363
|
<item>
|
364
|
<minute>*/5</minute>
|
365
|
<hour>*</hour>
|
366
|
<mday>*</mday>
|
367
|
<month>*</month>
|
368
|
<wday>*</wday>
|
369
|
<who>root</who>
|
370
|
<command>/usr/local/bin/checkreload.sh</command>
|
371
|
</item>
|
372
|
<item>
|
373
|
<minute>*/5</minute>
|
374
|
<hour>*</hour>
|
375
|
<mday>*</mday>
|
376
|
<month>*</month>
|
377
|
<wday>*</wday>
|
378
|
<who>root</who>
|
379
|
<command>/etc/ping_hosts.sh</command>
|
380
|
</item>
|
381
|
<item>
|
382
|
<minute>*/140</minute>
|
383
|
<hour>*</hour>
|
384
|
<mday>*</mday>
|
385
|
<month>*</month>
|
386
|
<wday>*</wday>
|
387
|
<who>root</who>
|
388
|
<command>/usr/local/sbin/reset_slbd.sh</command>
|
389
|
</item>
|
390
|
<item>
|
391
|
<minute>44</minute>
|
392
|
<hour>4</hour>
|
393
|
<mday>*</mday>
|
394
|
<month>*</month>
|
395
|
<wday>*</wday>
|
396
|
<who>root</who>
|
397
|
<command>/etc/pppoerestart</command>
|
398
|
</item>
|
399
|
</cron>
|
400
|
<installedpackages>
|
401
|
<openntpd>
|
402
|
<config>
|
403
|
<enable>on</enable>
|
404
|
<interface>lan,opt1</interface>
|
405
|
</config>
|
406
|
</openntpd>
|
407
|
<package>
|
408
|
<name>LCDproc</name>
|
409
|
<descr>LCD display driver</descr>
|
410
|
<website>http://www.lcdproc.org/</website>
|
411
|
<category>Utility</category>
|
412
|
<version>lcdproc-0.5.2_3</version>
|
413
|
<status>BETA</status>
|
414
|
<required_version>1.2.1</required_version>
|
415
|
<maintainer>seth.mos@xs4all.nl</maintainer>
|
416
|
<depends_on_package_base_url>http://files.pfsense.org/packages/7/All/</depends_on_package_base_url>
|
417
|
<depends_on_package>lcdproc-0.5.2_2.tbz</depends_on_package>
|
418
|
<config_file>http://www.pfsense.org/packages/config/lcdproc/lcdproc.xml</config_file>
|
419
|
<configurationfile>lcdproc.xml</configurationfile>
|
420
|
</package>
|
421
|
<package>
|
422
|
<name>Notes</name>
|
423
|
<website/>
|
424
|
<descr>Track things you want to note for this system.</descr>
|
425
|
<category>Status</category>
|
426
|
<pkginfolink/>
|
427
|
<config_file>http://www.pfsense.com/packages/config/notes/notes.xml</config_file>
|
428
|
<depends_on_package_base_url>http://files.pfsense.org/packages/7/All/</depends_on_package_base_url>
|
429
|
<version>0.2.4</version>
|
430
|
<status>Stable</status>
|
431
|
<required_version>1.2.1</required_version>
|
432
|
<maintainer>markjcrane@gmail.com</maintainer>
|
433
|
<configurationfile>notes.xml</configurationfile>
|
434
|
</package>
|
435
|
<package>
|
436
|
<name>anyterm</name>
|
437
|
<descr>Ajax Interactive Shell - Have you ever wanted SSH or telnet access to your system from an internet desert - from behind a strict firewall, from an internet cafe, or even from a mobile phone? Anyterm is a combination of a web page and a process that runs on your web server that provides this access. WARNING! We suggest using Stunnel in combination with this package!</descr>
|
438
|
<website>http://anyterm.org/</website>
|
439
|
<pkginfolink>http://doc.pfsense.org/index.php/AnyTerm_package</pkginfolink>
|
440
|
<category>Diagnostics</category>
|
441
|
<version>0.5</version>
|
442
|
<status>BETA</status>
|
443
|
<required_version>1.2.3</required_version>
|
444
|
<config_file>http://www.pfsense.com/packages/config/anyterm/anyterm.xml</config_file>
|
445
|
<configurationfile>anyterm.xml</configurationfile>
|
446
|
</package>
|
447
|
<package>
|
448
|
<name>OpenVPN-Enhancements</name>
|
449
|
<maintainer>mfuchs77@googlemail.com</maintainer>
|
450
|
<website>http://pfsense.trendchiller.com</website>
|
451
|
<descr>Enhance OpenVPN with TLS-auth and client/server-options. WARNING! Cannot be uninstalled.</descr>
|
452
|
<category>Security</category>
|
453
|
<version>1.2</version>
|
454
|
<status>STABLE</status>
|
455
|
<required_version>1.2</required_version>
|
456
|
<maximum_version>1.2.9</maximum_version>
|
457
|
<config_file>http://www.pfsense.com/packages/config/ovpnenhance/ovpnenhance.xml</config_file>
|
458
|
<configurationfile>ovpnenhance.xml</configurationfile>
|
459
|
</package>
|
460
|
<package>
|
461
|
<name>OpenVPN Status</name>
|
462
|
<descr>OpenVPN Status Page, backported from 2.0</descr>
|
463
|
<category>System</category>
|
464
|
<version>1.5</version>
|
465
|
<status>Beta</status>
|
466
|
<maintainer>jimp@pfsense.org</maintainer>
|
467
|
<required_version>1.2.3</required_version>
|
468
|
<config_file>http://www.pfsense.org/packages/config/openvpn-status/openvpn-status.xml</config_file>
|
469
|
<configurationfile>openvpn-status.xml</configurationfile>
|
470
|
</package>
|
471
|
<package>
|
472
|
<name>darkstat</name>
|
473
|
<website>http://dmr.ath.cx/net/darkstat/</website>
|
474
|
<descr>darkstat is a network statistics gatherer. It's a packet sniffer that runs as a background process on a cable/DSL router, gathers all sorts of statistics about network usage, and serves them over HTTP.</descr>
|
475
|
<category>Network Management</category>
|
476
|
<depends_on_package_base_url>http://www.pfsense.com/packages/config/darkstat/bin/</depends_on_package_base_url>
|
477
|
<depends_on_package>darkstat-3.0.712.tbz</depends_on_package>
|
478
|
<depends_on_package>gettext-0.17_1.tbz</depends_on_package>
|
479
|
<version>3.0.712</version>
|
480
|
<status>Stable</status>
|
481
|
<required_version>1.2.1</required_version>
|
482
|
<maintainer>sullrich+pfsp@gmail.com</maintainer>
|
483
|
<config_file>http://www.pfsense.com/packages/config/darkstat/darkstat.xml</config_file>
|
484
|
<configurationfile>darkstat.xml</configurationfile>
|
485
|
</package>
|
486
|
<package>
|
487
|
<name>IGMPproxy</name>
|
488
|
<descr>An IGMP proxy for multicast traffic.</descr>
|
489
|
<category>Network</category>
|
490
|
<version>0.1</version>
|
491
|
<required_version>1.2.2</required_version>
|
492
|
<status>BETA</status>
|
493
|
<pkginfolink>http://doc.pfsense.org/index.php/IGMPproxy</pkginfolink>
|
494
|
<config_file>http://www.pfsense.com/packages/config/igmpproxy/igmpproxy.xml</config_file>
|
495
|
<configurationfile>igmpproxy.xml</configurationfile>
|
496
|
<maintainer>eri@pfsense.org</maintainer>
|
497
|
</package>
|
498
|
<package>
|
499
|
<name>RRD Summary</name>
|
500
|
<descr>RRD Summary Page, which will give a total amount of traffic passed In/Out during this and the previous month.</descr>
|
501
|
<category>System</category>
|
502
|
<version>1.1</version>
|
503
|
<status>Beta</status>
|
504
|
<maintainer>jimp@pfsense.org</maintainer>
|
505
|
<required_version>1.2.3</required_version>
|
506
|
<config_file>http://www.pfsense.org/packages/config/rrd-summary/rrd-summary.xml</config_file>
|
507
|
<configurationfile>rrd-summary.xml</configurationfile>
|
508
|
</package>
|
509
|
<package>
|
510
|
<name>Packet Capture Fix</name>
|
511
|
<descr>Patch to fix packet capture on 1.2.3 embedded (NanoBSD)</descr>
|
512
|
<category>System</category>
|
513
|
<config_file>http://www.pfsense.com/packages/config/packetcapturefix/packetcapturefix.xml</config_file>
|
514
|
<version>0.2</version>
|
515
|
<status>BETA</status>
|
516
|
<required_version>1.2.3</required_version>
|
517
|
<maximum_version>1.2.3</maximum_version>
|
518
|
</package>
|
519
|
<menu>
|
520
|
<name>LCDproc</name>
|
521
|
<tooltiptext>Set LCDproc settings such as display driver and com port</tooltiptext>
|
522
|
<section>Services</section>
|
523
|
<url>/pkg_edit.php?xml=lcdproc.xml&id=0</url>
|
524
|
</menu>
|
525
|
<menu>
|
526
|
<name>Notes</name>
|
527
|
<tooltiptext>Notes.</tooltiptext>
|
528
|
<section>Status</section>
|
529
|
<configfile>notes.xml</configfile>
|
530
|
<url>/pkg.php?xml=notes.xml</url>
|
531
|
</menu>
|
532
|
<menu>
|
533
|
<name>Anyterm</name>
|
534
|
<tooltiptext/>
|
535
|
<section>Diagnostics</section>
|
536
|
<url>/pkg_edit.php?xml=anyterm.xml&id=0</url>
|
537
|
</menu>
|
538
|
<menu>
|
539
|
<name>OpenVPN</name>
|
540
|
<tooltiptext/>
|
541
|
<section>Status</section>
|
542
|
<url>/status_openvpn.php</url>
|
543
|
</menu>
|
544
|
<menu>
|
545
|
<name>Darkstat Settings</name>
|
546
|
<tooltiptext>Setup darkstat specific settings</tooltiptext>
|
547
|
<section>Diagnostics</section>
|
548
|
<url>/pkg_edit.php?xml=darkstat.xml&id=0</url>
|
549
|
</menu>
|
550
|
<menu>
|
551
|
<name>IGMP proxy</name>
|
552
|
<tooltiptext>Multicast proxy.</tooltiptext>
|
553
|
<section>Services</section>
|
554
|
<configfile>igmpproxy.xml</configfile>
|
555
|
</menu>
|
556
|
<menu>
|
557
|
<name>RRD Summary</name>
|
558
|
<tooltiptext/>
|
559
|
<section>Status</section>
|
560
|
<url>/status_rrd_summary.php</url>
|
561
|
</menu>
|
562
|
<service>
|
563
|
<name>lcdproc</name>
|
564
|
<rcfile>lcdproc.sh</rcfile>
|
565
|
<executable>LCDd</executable>
|
566
|
</service>
|
567
|
<service>
|
568
|
<name>Anyterm</name>
|
569
|
<rcfile>anyterm.sh</rcfile>
|
570
|
<executable>anytermd</executable>
|
571
|
<description>Ajax Interactive Shell</description>
|
572
|
</service>
|
573
|
<service>
|
574
|
<name>darkstat</name>
|
575
|
<rcfile>darkstat.sh</rcfile>
|
576
|
<executable>darkstat</executable>
|
577
|
</service>
|
578
|
<service>
|
579
|
<name>igmpproxy</name>
|
580
|
<rcfile>igmpproxy.sh</rcfile>
|
581
|
<executable>igmpproxy</executable>
|
582
|
<description>IGMP(multicast) proxy.</description>
|
583
|
</service>
|
584
|
<lcdproc>
|
585
|
<config>
|
586
|
<enable/>
|
587
|
<comport>com2</comport>
|
588
|
<size>16x2</size>
|
589
|
<driver>pyramid</driver>
|
590
|
</config>
|
591
|
</lcdproc>
|
592
|
<notes> </notes>
|
593
|
<squid>
|
594
|
<config>
|
595
|
<active_interface>opt1</active_interface>
|
596
|
<allow_interface>on</allow_interface>
|
597
|
<transparent_proxy>on</transparent_proxy>
|
598
|
<private_subnet_proxy_off>on</private_subnet_proxy_off>
|
599
|
<defined_ip_proxy_off/>
|
600
|
<log_enabled/>
|
601
|
<log_dir>/var/squid/logs</log_dir>
|
602
|
<log_rotate/>
|
603
|
<proxy_port>3128</proxy_port>
|
604
|
<icp_port/>
|
605
|
<visible_hostname>hub</visible_hostname>
|
606
|
<admin_email>hostmaster@example.net</admin_email>
|
607
|
<error_language>English</error_language>
|
608
|
<disable_xforward>on</disable_xforward>
|
609
|
<disable_via/>
|
610
|
<uri_whitespace>strip</uri_whitespace>
|
611
|
<dns_nameservers>127.0.0.1</dns_nameservers>
|
612
|
<disable_squidversion/>
|
613
|
<custom_options/>
|
614
|
</config>
|
615
|
</squid>
|
616
|
<squidcache>
|
617
|
<config>
|
618
|
<harddisk_cache_size>20000</harddisk_cache_size>
|
619
|
<harddisk_cache_system>aufs</harddisk_cache_system>
|
620
|
<harddisk_cache_location>/cache/squid</harddisk_cache_location>
|
621
|
<memory_cache_size>100</memory_cache_size>
|
622
|
<minimum_object_size>0</minimum_object_size>
|
623
|
<maximum_object_size>100000</maximum_object_size>
|
624
|
<level1_subdirs>16</level1_subdirs>
|
625
|
<memory_replacement_policy>heap GDSF</memory_replacement_policy>
|
626
|
<cache_replacement_policy>heap LFUDA</cache_replacement_policy>
|
627
|
<cache_swap_low>90</cache_swap_low>
|
628
|
<cache_swap_high>95</cache_swap_high>
|
629
|
<donotcache/>
|
630
|
<enable_offline/>
|
631
|
</config>
|
632
|
</squidcache>
|
633
|
<squidnac>
|
634
|
<config>
|
635
|
<allowed_subnets>MTAuMC4wLjAvOA==</allowed_subnets>
|
636
|
<unrestricted_hosts/>
|
637
|
<banned_hosts/>
|
638
|
<whitelist/>
|
639
|
<blacklist/>
|
640
|
<ext_cachemanager/>
|
641
|
</config>
|
642
|
</squidnac>
|
643
|
<squidtraffic>
|
644
|
<config>
|
645
|
<max_download_size>0</max_download_size>
|
646
|
<max_upload_size>0</max_upload_size>
|
647
|
<overall_throttling>0</overall_throttling>
|
648
|
<perhost_throttling>0</perhost_throttling>
|
649
|
<throttle_specific>on</throttle_specific>
|
650
|
<throttle_binaries/>
|
651
|
<throttle_cdimages/>
|
652
|
<throttle_multimedia/>
|
653
|
<throttle_others/>
|
654
|
<quick_abort_min>0</quick_abort_min>
|
655
|
<quick_abort_max>0</quick_abort_max>
|
656
|
<quick_abort_pct>90</quick_abort_pct>
|
657
|
</config>
|
658
|
</squidtraffic>
|
659
|
<darkstat>
|
660
|
<config>
|
661
|
<interface_array>wan</interface_array>
|
662
|
</config>
|
663
|
</darkstat>
|
664
|
<openvpnserver>
|
665
|
<config>
|
666
|
<disable/>
|
667
|
<protocol>UDP</protocol>
|
668
|
<dynamic_ip>on</dynamic_ip>
|
669
|
<local_port>1194</local_port>
|
670
|
<addresspool>10.49.100.0/24</addresspool>
|
671
|
<nopool/>
|
672
|
<local_network>10.49.0.0/16</local_network>
|
673
|
<remote_network/>
|
674
|
<client2client/>
|
675
|
<crypto>BF-CBC</crypto>
|
676
|
<auth_method>pki</auth_method>
|
677
|
<shared_key/>
|
678
|
<ca_cert></ca_cert>
|
679
|
<server_cert></server_cert>
|
680
|
<server_key></server_key>
|
681
|
<dh_params></dh_params>
|
682
|
<crl/>
|
683
|
<tls/>
|
684
|
<dhcp_domainname>dea.example.net</dhcp_domainname>
|
685
|
<dhcp_dns>10.49.1.1</dhcp_dns>
|
686
|
<dhcp_wins/>
|
687
|
<dhcp_nbdd/>
|
688
|
<dhcp_ntp/>
|
689
|
<dhcp_nbttype>0</dhcp_nbttype>
|
690
|
<dhcp_nbtscope/>
|
691
|
<dhcp_nbtdisable/>
|
692
|
<use_lzo>on</use_lzo>
|
693
|
<maxclients>10</maxclients>
|
694
|
<passtos/>
|
695
|
<gwredir/>
|
696
|
<custom_options/>
|
697
|
<description/>
|
698
|
</config>
|
699
|
</openvpnserver>
|
700
|
<openvpnclient>
|
701
|
<config/>
|
702
|
</openvpnclient>
|
703
|
</installedpackages>
|
704
|
<revision>
|
705
|
<description>Installed Packet Capture Fix package.</description>
|
706
|
<time>1299783929</time>
|
707
|
</revision>
|
708
|
<rrd>
|
709
|
<enable/>
|
710
|
<category>traffic</category>
|
711
|
<style>inverse</style>
|
712
|
</rrd>
|
713
|
<dnsupdate>
|
714
|
<host/>
|
715
|
<server/>
|
716
|
<ttl>60</ttl>
|
717
|
<keyname/>
|
718
|
<keytype>zone</keytype>
|
719
|
<keydata/>
|
720
|
</dnsupdate>
|
721
|
<ezshaper>
|
722
|
<step2>
|
723
|
<inside_int>opt1</inside_int>
|
724
|
<download>100000</download>
|
725
|
<outside_int>wan</outside_int>
|
726
|
<upload>1000</upload>
|
727
|
</step2>
|
728
|
<step3>
|
729
|
<provider>Generic</provider>
|
730
|
<address/>
|
731
|
<bandwidth>32</bandwidth>
|
732
|
</step3>
|
733
|
<step4>
|
734
|
<address/>
|
735
|
<bandwidthup/>
|
736
|
<bandwidthdown/>
|
737
|
</step4>
|
738
|
<step5>
|
739
|
<bandwidthup/>
|
740
|
<bandwidthdown/>
|
741
|
</step5>
|
742
|
<step7>
|
743
|
<enable>on</enable>
|
744
|
<msrdp>H</msrdp>
|
745
|
<vnc>H</vnc>
|
746
|
<appleremotedesktop>D</appleremotedesktop>
|
747
|
<pcanywhere>D</pcanywhere>
|
748
|
<irc>D</irc>
|
749
|
<jabber>D</jabber>
|
750
|
<icq>D</icq>
|
751
|
<aolinstantmessenger>D</aolinstantmessenger>
|
752
|
<msnmessenger>D</msnmessenger>
|
753
|
<teamspeak>D</teamspeak>
|
754
|
<pptp>H</pptp>
|
755
|
<ipsec>D</ipsec>
|
756
|
<streamingmp3>D</streamingmp3>
|
757
|
<rtsp>D</rtsp>
|
758
|
<http>D</http>
|
759
|
<smtp>D</smtp>
|
760
|
<pop3>D</pop3>
|
761
|
<imap>D</imap>
|
762
|
<lotusnotes>D</lotusnotes>
|
763
|
<dns>H</dns>
|
764
|
<icmp>D</icmp>
|
765
|
<smb>D</smb>
|
766
|
<snmp>D</snmp>
|
767
|
<mysqlserver>D</mysqlserver>
|
768
|
<nntp>D</nntp>
|
769
|
<cvsup>D</cvsup>
|
770
|
</step7>
|
771
|
</ezshaper>
|
772
|
</pfsense>
|