|
<?xml version="1.0"?>
|
|
<pfsense>
|
|
<version>22.8</version>
|
|
<lastchange></lastchange>
|
|
<system>
|
|
<optimization>normal</optimization>
|
|
<hostname>testpfsense</hostname>
|
|
<domain>home.arpa</domain>
|
|
<group>
|
|
<name>all</name>
|
|
<description><![CDATA[All Users]]></description>
|
|
<scope>system</scope>
|
|
<gid>1998</gid>
|
|
<member>0</member>
|
|
</group>
|
|
<group>
|
|
<name>admins</name>
|
|
<description><![CDATA[System Administrators]]></description>
|
|
<scope>system</scope>
|
|
<gid>1999</gid>
|
|
<member>0</member>
|
|
<priv>page-all</priv>
|
|
</group>
|
|
<user>
|
|
<name>admin</name>
|
|
<descr><![CDATA[System Administrator]]></descr>
|
|
<scope>system</scope>
|
|
<groupname>admins</groupname>
|
|
<bcrypt-hash>$2b$10$13u6qwCOwODv34GyCMgdWub6oQF3RX0rG7c3d3X4JvzuEmAXLYDd2</bcrypt-hash>
|
|
<uid>0</uid>
|
|
<priv>user-shell-access</priv>
|
|
</user>
|
|
<nextuid>2000</nextuid>
|
|
<nextgid>2000</nextgid>
|
|
<timeservers>2.pfsense.pool.ntp.org</timeservers>
|
|
<webgui>
|
|
<protocol>https</protocol>
|
|
<loginautocomplete></loginautocomplete>
|
|
<ssl-certref>63d0fccc7f458</ssl-certref>
|
|
<dashboardcolumns>2</dashboardcolumns>
|
|
<webguicss>pfSense.css</webguicss>
|
|
<logincss>dc2a2a</logincss>
|
|
</webgui>
|
|
<disablenatreflection>yes</disablenatreflection>
|
|
<disablesegmentationoffloading></disablesegmentationoffloading>
|
|
<disablelargereceiveoffloading></disablelargereceiveoffloading>
|
|
<ipv6allow></ipv6allow>
|
|
<maximumtableentries>400000</maximumtableentries>
|
|
<powerd_ac_mode>hadp</powerd_ac_mode>
|
|
<powerd_battery_mode>hadp</powerd_battery_mode>
|
|
<powerd_normal_mode>hadp</powerd_normal_mode>
|
|
<bogons>
|
|
<interval>monthly</interval>
|
|
</bogons>
|
|
<hn_altq_enable></hn_altq_enable>
|
|
<already_run_config_upgrade></already_run_config_upgrade>
|
|
<ssh></ssh>
|
|
<language>en_US</language>
|
|
<timezone>Etc/UTC</timezone>
|
|
<dns1host>8.8.4.4</dns1host>
|
|
<dnsserver>8.8.8.8</dnsserver>
|
|
<dnsallowoverride></dnsallowoverride>
|
|
</system>
|
|
<interfaces>
|
|
<wan>
|
|
<enable></enable>
|
|
<if>em2</if>
|
|
<mtu></mtu>
|
|
<ipaddr>81.143.222.156</ipaddr>
|
|
<ipaddrv6></ipaddrv6>
|
|
<subnet>29</subnet>
|
|
<gateway>WANGW</gateway>
|
|
<blockpriv></blockpriv>
|
|
<blockbogons></blockbogons>
|
|
<dhcphostname></dhcphostname>
|
|
<media></media>
|
|
<mediaopt></mediaopt>
|
|
<dhcp6-duid></dhcp6-duid>
|
|
<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
|
|
<subnetv6></subnetv6>
|
|
<gatewayv6></gatewayv6>
|
|
</wan>
|
|
<lan>
|
|
<enable></enable>
|
|
<if>em3</if>
|
|
<ipaddr>10.2.0.4</ipaddr>
|
|
<subnet>16</subnet>
|
|
<ipaddrv6></ipaddrv6>
|
|
<subnetv6></subnetv6>
|
|
<media></media>
|
|
<mediaopt></mediaopt>
|
|
<track6-interface>wan</track6-interface>
|
|
<track6-prefix-id>0</track6-prefix-id>
|
|
<gateway></gateway>
|
|
<gatewayv6></gatewayv6>
|
|
</lan>
|
|
</interfaces>
|
|
<staticroutes></staticroutes>
|
|
<dhcpd>
|
|
<lan>
|
|
<range>
|
|
<from>192.168.1.100</from>
|
|
<to>192.168.1.199</to>
|
|
</range>
|
|
</lan>
|
|
</dhcpd>
|
|
<dhcpdv6>
|
|
<lan>
|
|
<range>
|
|
<from>::1000</from>
|
|
<to>::2000</to>
|
|
</range>
|
|
<ramode>disabled</ramode>
|
|
<rapriority>medium</rapriority>
|
|
</lan>
|
|
</dhcpdv6>
|
|
<snmpd>
|
|
<syslocation></syslocation>
|
|
<syscontact></syscontact>
|
|
<rocommunity>public</rocommunity>
|
|
</snmpd>
|
|
<diag>
|
|
<ipv6nat>
|
|
<ipaddr></ipaddr>
|
|
</ipv6nat>
|
|
</diag>
|
|
<syslog>
|
|
<filterdescriptions>1</filterdescriptions>
|
|
</syslog>
|
|
<nat>
|
|
<outbound>
|
|
<mode>automatic</mode>
|
|
</outbound>
|
|
</nat>
|
|
<filter>
|
|
<rule>
|
|
<id></id>
|
|
<tracker>1674641076</tracker>
|
|
<type>pass</type>
|
|
<interface>wan</interface>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<tag></tag>
|
|
<tagged></tagged>
|
|
<max></max>
|
|
<max-src-nodes></max-src-nodes>
|
|
<max-src-conn></max-src-conn>
|
|
<max-src-states></max-src-states>
|
|
<statetimeout></statetimeout>
|
|
<statetype><![CDATA[keep state]]></statetype>
|
|
<os></os>
|
|
<protocol>icmp</protocol>
|
|
<icmptype>echoreq</icmptype>
|
|
<source>
|
|
<any></any>
|
|
</source>
|
|
<destination>
|
|
<network>(self)</network>
|
|
</destination>
|
|
<descr></descr>
|
|
<created>
|
|
<time>1674641076</time>
|
|
<username><![CDATA[admin@10.2.2.10 (Local Database)]]></username>
|
|
</created>
|
|
<updated>
|
|
<time>1674646832</time>
|
|
<username><![CDATA[admin@10.2.2.10 (Local Database)]]></username>
|
|
</updated>
|
|
</rule>
|
|
<rule>
|
|
<type>pass</type>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<descr><![CDATA[Default allow LAN to any rule]]></descr>
|
|
<interface>lan</interface>
|
|
<tracker>0100000101</tracker>
|
|
<source>
|
|
<network>lan</network>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
</rule>
|
|
<rule>
|
|
<type>pass</type>
|
|
<ipprotocol>inet6</ipprotocol>
|
|
<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
|
|
<interface>lan</interface>
|
|
<tracker>0100000102</tracker>
|
|
<source>
|
|
<network>lan</network>
|
|
</source>
|
|
<destination>
|
|
<any></any>
|
|
</destination>
|
|
</rule>
|
|
</filter>
|
|
<shaper>
|
|
</shaper>
|
|
<ipsec>
|
|
<client></client>
|
|
</ipsec>
|
|
<aliases>
|
|
</aliases>
|
|
<proxyarp></proxyarp>
|
|
<cron>
|
|
<item>
|
|
<minute>*/1</minute>
|
|
<hour>*</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/sbin/newsyslog</command>
|
|
</item>
|
|
<item>
|
|
<minute>1</minute>
|
|
<hour>3</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/etc/rc.periodic daily</command>
|
|
</item>
|
|
<item>
|
|
<minute>15</minute>
|
|
<hour>4</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>6</wday>
|
|
<who>root</who>
|
|
<command>/etc/rc.periodic weekly</command>
|
|
</item>
|
|
<item>
|
|
<minute>30</minute>
|
|
<hour>5</hour>
|
|
<mday>1</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/etc/rc.periodic monthly</command>
|
|
</item>
|
|
<item>
|
|
<minute>1,31</minute>
|
|
<hour>0-5</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 adjkerntz -a</command>
|
|
</item>
|
|
<item>
|
|
<minute>1</minute>
|
|
<hour>3</hour>
|
|
<mday>1</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
|
|
</item>
|
|
<item>
|
|
<minute>1</minute>
|
|
<hour>1</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
|
|
</item>
|
|
<item>
|
|
<minute>*/60</minute>
|
|
<hour>*</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
|
|
</item>
|
|
<item>
|
|
<minute>30</minute>
|
|
<hour>12</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
|
|
</item>
|
|
<item>
|
|
<minute>1</minute>
|
|
<hour>0</hour>
|
|
<mday>*</mday>
|
|
<month>*</month>
|
|
<wday>*</wday>
|
|
<who>root</who>
|
|
<command>/usr/bin/nice -n20 /etc/rc.update_pkg_metadata</command>
|
|
</item>
|
|
</cron>
|
|
<wol></wol>
|
|
<rrd>
|
|
<enable></enable>
|
|
</rrd>
|
|
<widgets>
|
|
<sequence>system_information:col1:open:0,disks:col1:open:0,interfaces:col2:open:0</sequence>
|
|
<period>10</period>
|
|
</widgets>
|
|
<openvpn></openvpn>
|
|
<dnshaper>
|
|
</dnshaper>
|
|
<unbound>
|
|
<enable></enable>
|
|
<dnssec></dnssec>
|
|
<active_interface></active_interface>
|
|
<outgoing_interface></outgoing_interface>
|
|
<custom_options></custom_options>
|
|
<hideidentity></hideidentity>
|
|
<hideversion></hideversion>
|
|
<dnssecstripped></dnssecstripped>
|
|
</unbound>
|
|
<vlans></vlans>
|
|
<qinqs></qinqs>
|
|
<revision>
|
|
<time>1674646832</time>
|
|
<description><![CDATA[admin@10.2.2.10 (Local Database): Firewall: Rules - saved/edited a firewall rule.]]></description>
|
|
<username><![CDATA[admin@10.2.2.10 (Local Database)]]></username>
|
|
</revision>
|
|
<gateways>
|
|
<gateway_item>
|
|
<interface>wan</interface>
|
|
<gateway>81.143.222.153</gateway>
|
|
<name>WANGW</name>
|
|
<weight>1</weight>
|
|
<ipprotocol>inet</ipprotocol>
|
|
<interval></interval>
|
|
<descr><![CDATA[Interface wan Gateway]]></descr>
|
|
</gateway_item>
|
|
<defaultgw4>WANGW</defaultgw4>
|
|
</gateways>
|
|
<captiveportal></captiveportal>
|
|
<dnsmasq></dnsmasq>
|
|
<ntpd>
|
|
<gps></gps>
|
|
</ntpd>
|
|
<cert>
|
|
<refid>63d0fccc7f458</refid>
|
|
<descr><![CDATA[webConfigurator default (63d0fccc7f458)]]></descr>
|
|
<type>server</type>
|
|
<crt>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</crt>
|
|
<prv>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</prv>
|
|
</cert>
|
|
<virtualip>
|
|
<vip>
|
|
<mode>ipalias</mode>
|
|
<interface>wan</interface>
|
|
<uniqid>63d10b0b73f25</uniqid>
|
|
<descr></descr>
|
|
<type>single</type>
|
|
<subnet_bits>29</subnet_bits>
|
|
<subnet>81.143.222.157</subnet>
|
|
</vip>
|
|
</virtualip>
|
|
</pfsense>
|