Project

General

Profile

Bug #3250 » config-WASLAB-FW1.EISLAB-IL.INTRA-20140128011706.xml

configuration - Zeev Zalessky, 01/27/2014 05:15 PM

 
1
<?xml version="1.0"?>
2
<pfsense>
3
	<version>10.0</version>
4
	<lastchange/>
5
	<theme>pfsense_ng</theme>
6
	<sysctl>
7
		<item>
8
			<descr><![CDATA[Disable the pf ftp proxy handler.]]></descr>
9
			<tunable>debug.pfftpproxy</tunable>
10
			<value>default</value>
11
		</item>
12
		<item>
13
			<descr><![CDATA[Increase UFS read-ahead speeds to match current state of hard drives and NCQ. More information here: http://ivoras.sharanet.org/blog/tree/2010-11-19.ufs-read-ahead.html]]></descr>
14
			<tunable>vfs.read_max</tunable>
15
			<value>default</value>
16
		</item>
17
		<item>
18
			<descr><![CDATA[Set the ephemeral port range to be lower.]]></descr>
19
			<tunable>net.inet.ip.portrange.first</tunable>
20
			<value>default</value>
21
		</item>
22
		<item>
23
			<descr><![CDATA[Drop packets to closed TCP ports without returning a RST]]></descr>
24
			<tunable>net.inet.tcp.blackhole</tunable>
25
			<value>default</value>
26
		</item>
27
		<item>
28
			<descr><![CDATA[Do not send ICMP port unreachable messages for closed UDP ports]]></descr>
29
			<tunable>net.inet.udp.blackhole</tunable>
30
			<value>default</value>
31
		</item>
32
		<item>
33
			<descr><![CDATA[Randomize the ID field in IP packets (default is 0: sequential IP IDs)]]></descr>
34
			<tunable>net.inet.ip.random_id</tunable>
35
			<value>default</value>
36
		</item>
37
		<item>
38
			<descr><![CDATA[Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)]]></descr>
39
			<tunable>net.inet.tcp.drop_synfin</tunable>
40
			<value>default</value>
41
		</item>
42
		<item>
43
			<descr><![CDATA[Enable sending IPv4 redirects]]></descr>
44
			<tunable>net.inet.ip.redirect</tunable>
45
			<value>default</value>
46
		</item>
47
		<item>
48
			<descr><![CDATA[Enable sending IPv6 redirects]]></descr>
49
			<tunable>net.inet6.ip6.redirect</tunable>
50
			<value>default</value>
51
		</item>
52
		<item>
53
			<descr><![CDATA[Generate SYN cookies for outbound SYN-ACK packets]]></descr>
54
			<tunable>net.inet.tcp.syncookies</tunable>
55
			<value>default</value>
56
		</item>
57
		<item>
58
			<tunable>net.inet.tcp.recvspace</tunable>
59
			<value>1048576</value>
60
			<descr><![CDATA[Maximum incoming/outgoing TCP datagram size (receive)]]></descr>
61
		</item>
62
		<item>
63
			<tunable>net.inet.tcp.sendspace</tunable>
64
			<value>1048576</value>
65
			<descr><![CDATA[Maximum incoming/outgoing TCP datagram size (send)]]></descr>
66
		</item>
67
		<item>
68
			<tunable>net.inet.ip.fastforwarding</tunable>
69
			<value>1</value>
70
			<descr><![CDATA[IP Fastforwarding]]></descr>
71
		</item>
72
		<item>
73
			<descr><![CDATA[Do not delay ACK to try and piggyback it onto a data packet]]></descr>
74
			<tunable>net.inet.tcp.delayed_ack</tunable>
75
			<value>default</value>
76
		</item>
77
		<item>
78
			<descr><![CDATA[Maximum outgoing UDP datagram size]]></descr>
79
			<tunable>net.inet.udp.maxdgram</tunable>
80
			<value>default</value>
81
		</item>
82
		<item>
83
			<descr><![CDATA[Handling of non-IP packets which are not passed to pfil (see if_bridge(4))]]></descr>
84
			<tunable>net.link.bridge.pfil_onlyip</tunable>
85
			<value>default</value>
86
		</item>
87
		<item>
88
			<descr><![CDATA[Set to 0 to disable filtering on the incoming and outgoing member interfaces.]]></descr>
89
			<tunable>net.link.bridge.pfil_member</tunable>
90
			<value>default</value>
91
		</item>
92
		<item>
93
			<descr><![CDATA[Set to 1 to enable filtering on the bridge interface]]></descr>
94
			<tunable>net.link.bridge.pfil_bridge</tunable>
95
			<value>default</value>
96
		</item>
97
		<item>
98
			<descr><![CDATA[Allow unprivileged access to tap(4) device nodes]]></descr>
99
			<tunable>net.link.tap.user_open</tunable>
100
			<value>default</value>
101
		</item>
102
		<item>
103
			<descr><![CDATA[Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())]]></descr>
104
			<tunable>kern.randompid</tunable>
105
			<value>default</value>
106
		</item>
107
		<item>
108
			<descr><![CDATA[Maximum size of the IP input queue]]></descr>
109
			<tunable>net.inet.ip.intr_queue_maxlen</tunable>
110
			<value>default</value>
111
		</item>
112
		<item>
113
			<descr><![CDATA[Disable CTRL+ALT+Delete reboot from keyboard.]]></descr>
114
			<tunable>hw.syscons.kbd_reboot</tunable>
115
			<value>default</value>
116
		</item>
117
		<item>
118
			<tunable>net.inet.tcp.inflight.enable</tunable>
119
			<value>0</value>
120
			<descr><![CDATA[Enable TCP Inflight mode]]></descr>
121
		</item>
122
		<item>
123
			<descr><![CDATA[Enable TCP extended debugging]]></descr>
124
			<tunable>net.inet.tcp.log_debug</tunable>
125
			<value>default</value>
126
		</item>
127
		<item>
128
			<descr><![CDATA[Set ICMP Limits]]></descr>
129
			<tunable>net.inet.icmp.icmplim</tunable>
130
			<value>default</value>
131
		</item>
132
		<item>
133
			<descr><![CDATA[TCP Offload Engine]]></descr>
134
			<tunable>net.inet.tcp.tso</tunable>
135
			<value>default</value>
136
		</item>
137
		<item>
138
			<tunable>kern.ipc.maxsockbuf</tunable>
139
			<value>16777216</value>
140
			<descr><![CDATA[Maximum socket buffer size]]></descr>
141
		</item>
142
		<item>
143
			<tunable>hw.intr_storm_threshold</tunable>
144
			<value>0</value>
145
			<descr/>
146
		</item>
147
		<item>
148
			<tunable>kern.ipc.nmbjumbop</tunable>
149
			<value>262144</value>
150
			<descr/>
151
		</item>
152
		<item>
153
			<tunable>net.inet.tcp.sendbuf_max</tunable>
154
			<value>16777216</value>
155
			<descr/>
156
		</item>
157
		<item>
158
			<tunable>net.inet.tcp.recvbuf_max</tunable>
159
			<value>16777216</value>
160
			<descr/>
161
		</item>
162
		<item>
163
			<tunable>net.inet.tcp.sendbuf_auto</tunable>
164
			<value>1</value>
165
			<descr/>
166
		</item>
167
		<item>
168
			<tunable>net.inet.tcp.recvbuf_auto</tunable>
169
			<value>1</value>
170
			<descr/>
171
		</item>
172
		<item>
173
			<tunable>net.inet.tcp.sendbuf_inc</tunable>
174
			<value>16384</value>
175
			<descr/>
176
		</item>
177
		<item>
178
			<tunable>net.inet.tcp.recvbuf_inc</tunable>
179
			<value>524288</value>
180
			<descr/>
181
		</item>
182
		<item>
183
			<tunable>kern.ipc.maxsockbuf</tunable>
184
			<value>157286400</value>
185
			<descr/>
186
		</item>
187
		<item>
188
			<tunable>net.inet.tcp.mssdflt</tunable>
189
			<value>1460</value>
190
			<descr><![CDATA[maximum segment size (MSS) specifies the largest payload of data in a single TCP segment]]></descr>
191
		</item>
192
	</sysctl>
193
	<system>
194
		<optimization>normal</optimization>
195
		<hostname>WASLAB-FW1</hostname>
196
		<domain>EISLAB-IL.INTRA</domain>
197
		<group>
198
			<name>all</name>
199
			<description><![CDATA[All Users]]></description>
200
			<scope>system</scope>
201
			<gid>1998</gid>
202
		</group>
203
		<group>
204
			<name>admins</name>
205
			<description><![CDATA[System Administrators]]></description>
206
			<scope>system</scope>
207
			<gid>1999</gid>
208
			<member>0</member>
209
			<priv>page-all</priv>
210
		</group>
211
		<user>
212
			<name>admin</name>
213
			<descr><![CDATA[System Administrator]]></descr>
214
			<scope>system</scope>
215
			<groupname>admins</groupname>
216
			<password>$1$rjK8yu1K$S2viNI/Wn2qkAXy4DXbfU1</password>
217
			<uid>0</uid>
218
			<priv>user-shell-access</priv>
219
			<md5-hash>9132f164344106689f370606a5beadcb</md5-hash>
220
			<nt-hash>2fbac3ca08d276bd1ac8ed01f36059cf</nt-hash>
221
		</user>
222
		<nextuid>2002</nextuid>
223
		<nextgid>2000</nextgid>
224
		<timezone>Asia/Jerusalem</timezone>
225
		<time-update-interval/>
226
		<timeservers>10.61.240.131 10.61.240.121 10.61.240.190</timeservers>
227
		<webgui>
228
			<protocol>http</protocol>
229
			<ssl-certref>4fb89e8447e7f</ssl-certref>
230
			<port/>
231
			<max_procs>2</max_procs>
232
			<nohttpreferercheck/>
233
		</webgui>
234
		<dns1gwint>none</dns1gwint>
235
		<dns2gwint>none</dns2gwint>
236
		<dns3gwint>none</dns3gwint>
237
		<dns4gwint>none</dns4gwint>
238
		<gitsync>
239
			<repositoryurl/>
240
			<branch/>
241
		</gitsync>
242
		<enablesshd>enabled</enablesshd>
243
		<maximumstates/>
244
		<maximumtableentries/>
245
		<enablebinatreflection>yes</enablebinatreflection>
246
		<enablenatreflectionhelper>yes</enablenatreflectionhelper>
247
		<reflectiontimeout/>
248
		<sharednet/>
249
		<scrubnodf>enabled</scrubnodf>
250
		<maximumtables/>
251
		<disablescrub>yes</disablescrub>
252
		<proxyuser>admin</proxyuser>
253
		<proxypass>ESXpumpkin1</proxypass>
254
		<lb_use_sticky/>
255
		<language>en_US</language>
256
		<dnsserver>10.61.240.121</dnsserver>
257
		<dnsserver>10.61.240.131</dnsserver>
258
		<dnsallowoverride/>
259
		<dnslocalhost/>
260
		<dns1gw>none</dns1gw>
261
		<dns2gw>none</dns2gw>
262
		<dns3gw>none</dns3gw>
263
		<dns4gw>none</dns4gw>
264
		<disablelargereceiveoffloading/>
265
		<firmware>
266
			<alturl>
267
				<enable/>
268
				<firmwareurl>http://snapshots.pfsense.org/FreeBSD_RELENG_8_3/amd64/pfSense_RELENG_2_1/.updaters/</firmwareurl>
269
			</alturl>
270
			<allowinvalidsig/>
271
		</firmware>
272
		<powerd_ac_mode>hadp</powerd_ac_mode>
273
		<powerd_battery_mode>hadp</powerd_battery_mode>
274
		<use_mfs_tmp_size/>
275
		<use_mfs_var_size/>
276
		<shellcmd>ifconfig ix0 -tso </shellcmd>
277
		<shellcmd>ifconfig ix1 -tso </shellcmd>
278
		<shellcmd>ifconfig ix2 -tso </shellcmd>
279
		<shellcmd>ifconfig ix3 -tso </shellcmd>
280
		<thermal_hardware>coretemp</thermal_hardware>
281
		<ipv6allow/>
282
		<authserver/>
283
		<disablechecksumoffloading/>
284
		<disablesegmentationoffloading/>
285
	</system>
286
	<interfaces>
287
		<wan>
288
			<enable/>
289
			<if>lagg1</if>
290
			<descr><![CDATA[WAN]]></descr>
291
			<spoofmac/>
292
			<ipaddr>10.165.128.211</ipaddr>
293
			<subnet>24</subnet>
294
			<gateway>WANGW</gateway>
295
		</wan>
296
		<lan>
297
			<descr><![CDATA[MNG]]></descr>
298
			<if>igb0</if>
299
			<enable/>
300
			<spoofmac/>
301
			<ipaddr>192.168.100.1</ipaddr>
302
			<subnet>24</subnet>
303
		</lan>
304
		<opt1>
305
			<descr><![CDATA[165_240]]></descr>
306
			<if>lagg0_vlan640</if>
307
			<enable/>
308
			<spoofmac/>
309
			<ipaddr>10.165.240.211</ipaddr>
310
			<subnet>24</subnet>
311
		</opt1>
312
		<opt2>
313
			<descr><![CDATA[165_241]]></descr>
314
			<if>lagg0_vlan641</if>
315
			<enable/>
316
			<spoofmac/>
317
			<ipaddr>10.165.241.211</ipaddr>
318
			<subnet>24</subnet>
319
		</opt2>
320
		<opt3>
321
			<descr><![CDATA[165_242]]></descr>
322
			<if>lagg0_vlan642</if>
323
			<enable/>
324
			<spoofmac/>
325
			<ipaddr>10.165.242.211</ipaddr>
326
			<subnet>24</subnet>
327
		</opt3>
328
		<opt4>
329
			<descr><![CDATA[165_243]]></descr>
330
			<if>lagg0_vlan643</if>
331
			<enable/>
332
			<spoofmac/>
333
			<ipaddr>10.165.243.211</ipaddr>
334
			<subnet>24</subnet>
335
		</opt4>
336
		<opt5>
337
			<descr><![CDATA[165_244]]></descr>
338
			<if>lagg0_vlan644</if>
339
			<enable/>
340
			<spoofmac/>
341
			<ipaddr>10.165.244.211</ipaddr>
342
			<subnet>24</subnet>
343
		</opt5>
344
		<opt6>
345
			<descr><![CDATA[165_245]]></descr>
346
			<if>lagg0_vlan645</if>
347
			<enable/>
348
			<spoofmac/>
349
			<ipaddr>10.165.245.211</ipaddr>
350
			<subnet>24</subnet>
351
		</opt6>
352
		<opt7>
353
			<descr><![CDATA[165_246]]></descr>
354
			<if>lagg0_vlan646</if>
355
			<enable/>
356
			<spoofmac/>
357
			<ipaddr>10.165.246.211</ipaddr>
358
			<subnet>24</subnet>
359
		</opt7>
360
		<opt8>
361
			<descr><![CDATA[165_247]]></descr>
362
			<if>lagg0_vlan647</if>
363
			<enable/>
364
			<spoofmac/>
365
			<ipaddr>10.165.247.211</ipaddr>
366
			<subnet>24</subnet>
367
		</opt8>
368
		<opt9>
369
			<descr><![CDATA[LAB_INFRA]]></descr>
370
			<if>lagg0_vlan600</if>
371
			<enable/>
372
			<ipaddr>10.165.200.211</ipaddr>
373
			<subnet>24</subnet>
374
			<spoofmac/>
375
		</opt9>
376
		<opt10>
377
			<descr><![CDATA[165_140]]></descr>
378
			<if>lagg0_vlan540</if>
379
			<enable/>
380
			<ipaddr>10.165.140.211</ipaddr>
381
			<subnet>24</subnet>
382
			<spoofmac/>
383
		</opt10>
384
		<opt11>
385
			<descr><![CDATA[165_141]]></descr>
386
			<if>lagg0_vlan541</if>
387
			<enable/>
388
			<ipaddr>10.165.141.211</ipaddr>
389
			<subnet>24</subnet>
390
			<spoofmac/>
391
		</opt11>
392
		<opt12>
393
			<descr><![CDATA[165_130]]></descr>
394
			<if>lagg0_vlan530</if>
395
			<enable/>
396
			<spoofmac/>
397
			<ipaddr>10.165.130.211</ipaddr>
398
			<subnet>24</subnet>
399
		</opt12>
400
		<opt13>
401
			<descr><![CDATA[vlan60]]></descr>
402
			<if>lagg0_vlan60</if>
403
			<enable/>
404
			<spoofmac/>
405
			<ipaddr>10.161.60.253</ipaddr>
406
			<subnet>24</subnet>
407
		</opt13>
408
		<opt14>
409
			<descr><![CDATA[165_223]]></descr>
410
			<if>lagg0_vlan623</if>
411
			<enable/>
412
			<ipaddr>10.165.223.211</ipaddr>
413
			<subnet>24</subnet>
414
			<spoofmac/>
415
		</opt14>
416
		<opt15>
417
			<descr><![CDATA[165_142]]></descr>
418
			<if>lagg0_vlan542</if>
419
			<enable/>
420
			<ipaddr>10.165.142.211</ipaddr>
421
			<subnet>24</subnet>
422
			<spoofmac/>
423
		</opt15>
424
		<opt16>
425
			<descr><![CDATA[161_134]]></descr>
426
			<if>lagg0_vlan134</if>
427
			<enable/>
428
			<spoofmac/>
429
			<ipaddr>10.161.134.211</ipaddr>
430
			<subnet>24</subnet>
431
		</opt16>
432
		<opt17>
433
			<descr><![CDATA[161_135]]></descr>
434
			<if>lagg0_vlan135</if>
435
			<enable/>
436
			<ipaddr>10.161.135.211</ipaddr>
437
			<subnet>24</subnet>
438
			<spoofmac/>
439
		</opt17>
440
		<opt18>
441
			<descr><![CDATA[VLAN20]]></descr>
442
			<if>lagg0_vlan20</if>
443
			<enable/>
444
			<spoofmac/>
445
			<ipaddr>10.161.20.253</ipaddr>
446
			<subnet>24</subnet>
447
		</opt18>
448
		<opt19>
449
			<descr><![CDATA[165_143]]></descr>
450
			<if>lagg0_vlan543</if>
451
			<enable/>
452
			<ipaddr>10.165.143.211</ipaddr>
453
			<subnet>24</subnet>
454
			<spoofmac/>
455
		</opt19>
456
		<opt20>
457
			<descr><![CDATA[165_144]]></descr>
458
			<if>lagg0_vlan544</if>
459
			<enable/>
460
			<ipaddr>10.165.144.211</ipaddr>
461
			<subnet>24</subnet>
462
			<spoofmac/>
463
		</opt20>
464
		<opt21>
465
			<descr><![CDATA[165_145]]></descr>
466
			<if>lagg0_vlan545</if>
467
			<enable/>
468
			<ipaddr>10.165.145.211</ipaddr>
469
			<subnet>24</subnet>
470
			<spoofmac/>
471
		</opt21>
472
		<opt22>
473
			<descr><![CDATA[165_146]]></descr>
474
			<if>lagg0_vlan546</if>
475
			<enable/>
476
			<ipaddr>10.165.146.211</ipaddr>
477
			<subnet>24</subnet>
478
			<spoofmac/>
479
		</opt22>
480
		<opt23>
481
			<descr><![CDATA[165_129]]></descr>
482
			<if>lagg0_vlan529</if>
483
			<enable/>
484
			<spoofmac/>
485
			<ipaddr>10.165.129.211</ipaddr>
486
			<subnet>24</subnet>
487
		</opt23>
488
		<opt24>
489
			<descr><![CDATA[DMZ]]></descr>
490
			<if>lagg0_vlan580</if>
491
			<enable/>
492
			<spoofmac/>
493
			<ipaddr>10.165.180.211</ipaddr>
494
			<subnet>24</subnet>
495
		</opt24>
496
		<opt25>
497
			<descr><![CDATA[165_205]]></descr>
498
			<if>lagg0_vlan605</if>
499
			<enable/>
500
			<ipaddr>10.165.205.211</ipaddr>
501
			<subnet>24</subnet>
502
			<spoofmac/>
503
		</opt25>
504
	</interfaces>
505
	<staticroutes/>
506
	<dhcpd>
507
		<opt13>
508
			<range>
509
				<from>10.161.60.1</from>
510
				<to>10.161.60.50</to>
511
			</range>
512
			<defaultleasetime/>
513
			<maxleasetime/>
514
			<netmask/>
515
			<failover_peerip/>
516
			<gateway>10.161.60.245</gateway>
517
			<domain>verint.corp.verintsystems.com</domain>
518
			<domainsearchlist/>
519
			<ddnsdomain/>
520
			<tftp/>
521
			<ldap/>
522
			<next-server/>
523
			<filename/>
524
			<rootpath/>
525
			<numberoptions/>
526
			<dnsserver>10.61.240.131</dnsserver>
527
			<dnsserver>10.61.240.121</dnsserver>
528
			<enable/>
529
			<ntpserver>10.61.240.190</ntpserver>
530
		</opt13>
531
		<lan>
532
			<range>
533
				<from>192.168.100.1</from>
534
				<to>192.168.100.10</to>
535
			</range>
536
			<enable/>
537
			<failover_peerip/>
538
			<dhcpleaseinlocaltime/>
539
			<defaultleasetime/>
540
			<maxleasetime/>
541
			<netmask/>
542
			<gateway/>
543
			<domain/>
544
			<domainsearchlist/>
545
			<ddnsdomain/>
546
			<mac_allow/>
547
			<mac_deny/>
548
			<tftp/>
549
			<ldap/>
550
			<nextserver/>
551
			<filename/>
552
			<rootpath/>
553
			<numberoptions/>
554
		</lan>
555
		<opt18>
556
			<range>
557
				<from>10.161.20.1</from>
558
				<to>10.161.20.199</to>
559
			</range>
560
			<defaultleasetime/>
561
			<maxleasetime/>
562
			<netmask/>
563
			<failover_peerip/>
564
			<gateway>10.161.20.210</gateway>
565
			<domain>eislab-il.intra</domain>
566
			<domainsearchlist>verint.corp.verintsystems.com</domainsearchlist>
567
			<enable/>
568
			<ddnsdomain/>
569
			<tftp/>
570
			<ldap/>
571
			<next-server/>
572
			<filename/>
573
			<rootpath/>
574
			<numberoptions/>
575
			<dhcpleaseinlocaltime/>
576
			<mac_allow/>
577
			<mac_deny/>
578
			<nextserver/>
579
			<dnsserver>10.165.200.100</dnsserver>
580
			<dnsserver>10.165.200.101</dnsserver>
581
			<ntpserver>10.61.240.121</ntpserver>
582
			<ntpserver>10.61.240.131</ntpserver>
583
		</opt18>
584
		<wan>
585
			<range>
586
				<from>10.165.128.220</from>
587
				<to>10.165.128.240</to>
588
			</range>
589
			<defaultleasetime/>
590
			<maxleasetime/>
591
			<netmask/>
592
			<failover_peerip/>
593
			<dnsserver>10.165.200.100</dnsserver>
594
			<dnsserver>10.165.200.101</dnsserver>
595
			<gateway>10.165.128.210</gateway>
596
			<domain/>
597
			<domainsearchlist/>
598
			<enable/>
599
			<ddnsdomain/>
600
			<tftp/>
601
			<ldap/>
602
			<next-server/>
603
			<filename/>
604
			<rootpath/>
605
			<numberoptions/>
606
		</wan>
607
		<opt19>
608
			<range>
609
				<from>10.165.143.100</from>
610
				<to>10.165.143.110</to>
611
			</range>
612
			<defaultleasetime/>
613
			<maxleasetime/>
614
			<netmask/>
615
			<failover_peerip/>
616
			<dnsserver>10.165.200.100</dnsserver>
617
			<dnsserver>10.165.200.101</dnsserver>
618
			<gateway>10.165.143.210</gateway>
619
			<domain/>
620
			<domainsearchlist/>
621
			<enable/>
622
			<ddnsdomain/>
623
			<tftp/>
624
			<ldap/>
625
			<next-server/>
626
			<filename/>
627
			<rootpath/>
628
			<numberoptions/>
629
		</opt19>
630
	</dhcpd>
631
	<pptpd>
632
		<mode/>
633
		<redir/>
634
		<localip/>
635
		<remoteip/>
636
	</pptpd>
637
	<dnsmasq>
638
		<enable/>
639
		<domainoverrides>
640
			<domain>verint.corp.verintsystems.com</domain>
641
			<ip>10.61.240.121</ip>
642
			<descr/>
643
		</domainoverrides>
644
	</dnsmasq>
645
	<snmpd>
646
		<syslocation/>
647
		<syscontact/>
648
		<rocommunity>public</rocommunity>
649
		<modules>
650
			<mibii/>
651
			<netgraph/>
652
			<pf/>
653
			<hostres/>
654
			<ucd/>
655
			<regex/>
656
		</modules>
657
		<enable/>
658
		<pollport>161</pollport>
659
		<trapserver/>
660
		<trapserverport/>
661
		<trapstring/>
662
		<bindip/>
663
	</snmpd>
664
	<diag>
665
		<ipv6nat/>
666
	</diag>
667
	<bridge/>
668
	<syslog>
669
		<nentries>2000</nentries>
670
		<nologbogons/>
671
		<nologprivatenets/>
672
		<reverse/>
673
		<filterdescriptions>2</filterdescriptions>
674
		<nologdefaultblock/>
675
	</syslog>
676
	<filter>
677
		<rule>
678
			<id/>
679
			<type>pass</type>
680
			<interface>ADomains,Desktops,Recorders,DataCenter,wan,lan,opt1,opt2,opt3,opt4,opt5,opt6,opt7,opt8,opt9,opt10,opt11,opt12,opt13,opt14</interface>
681
			<tag/>
682
			<tagged/>
683
			<direction>any</direction>
684
			<floating>yes</floating>
685
			<max/>
686
			<max-src-nodes/>
687
			<max-src-conn/>
688
			<max-src-states/>
689
			<statetimeout/>
690
			<statetype>keep state</statetype>
691
			<os/>
692
			<source>
693
				<any/>
694
			</source>
695
			<destination>
696
				<address>224.0.0.18</address>
697
			</destination>
698
			<descr/>
699
		</rule>
700
		<rule>
701
			<id/>
702
			<type>pass</type>
703
			<interface>wan</interface>
704
			<tag/>
705
			<tagged/>
706
			<max/>
707
			<max-src-nodes/>
708
			<max-src-conn/>
709
			<max-src-states/>
710
			<statetimeout/>
711
			<statetype>keep state</statetype>
712
			<os/>
713
			<source>
714
				<any/>
715
			</source>
716
			<destination>
717
				<any/>
718
			</destination>
719
			<descr/>
720
		</rule>
721
		<rule>
722
			<id/>
723
			<type>pass</type>
724
			<interface>lan</interface>
725
			<ipprotocol>inet</ipprotocol>
726
			<tag/>
727
			<tagged/>
728
			<max/>
729
			<max-src-nodes/>
730
			<max-src-conn/>
731
			<max-src-states/>
732
			<statetimeout/>
733
			<statetype>keep state</statetype>
734
			<os/>
735
			<source>
736
				<any/>
737
			</source>
738
			<destination>
739
				<any/>
740
			</destination>
741
			<descr><![CDATA[Default allow LAN to any rule]]></descr>
742
			<updated>
743
				<time>1379334925</time>
744
				<username>admin@10.61.21.63</username>
745
			</updated>
746
		</rule>
747
		<rule>
748
			<id/>
749
			<type>block</type>
750
			<interface>ADomains</interface>
751
			<tag/>
752
			<tagged/>
753
			<max/>
754
			<max-src-nodes/>
755
			<max-src-conn/>
756
			<max-src-states/>
757
			<statetimeout/>
758
			<statetype>keep state</statetype>
759
			<os/>
760
			<protocol>tcp/udp</protocol>
761
			<source>
762
				<address>DC_DOMAINS</address>
763
			</source>
764
			<destination>
765
				<address>DC_DOMAINS</address>
766
				<port>DC_PORTS_Blocked</port>
767
			</destination>
768
			<log/>
769
			<descr/>
770
		</rule>
771
		<rule>
772
			<id/>
773
			<type>pass</type>
774
			<interface>ADomains</interface>
775
			<tag/>
776
			<tagged/>
777
			<max/>
778
			<max-src-nodes/>
779
			<max-src-conn/>
780
			<max-src-states/>
781
			<statetimeout/>
782
			<statetype>keep state</statetype>
783
			<os/>
784
			<protocol>icmp</protocol>
785
			<source>
786
				<address>DC_DOMAINS</address>
787
			</source>
788
			<destination>
789
				<address>DC_DOMAINS</address>
790
			</destination>
791
			<descr/>
792
		</rule>
793
		<rule>
794
			<id/>
795
			<type>pass</type>
796
			<interface>ADomains</interface>
797
			<tag/>
798
			<tagged/>
799
			<max/>
800
			<max-src-nodes/>
801
			<max-src-conn/>
802
			<max-src-states/>
803
			<statetimeout/>
804
			<statetype>keep state</statetype>
805
			<os/>
806
			<protocol>tcp</protocol>
807
			<source>
808
				<address>DC_DOMAINS</address>
809
			</source>
810
			<destination>
811
				<address>DC_DOMAINS</address>
812
				<port>DC_PORTS_TCP</port>
813
			</destination>
814
			<descr/>
815
		</rule>
816
		<rule>
817
			<id/>
818
			<type>pass</type>
819
			<interface>ADomains</interface>
820
			<tag/>
821
			<tagged/>
822
			<max/>
823
			<max-src-nodes/>
824
			<max-src-conn/>
825
			<max-src-states/>
826
			<statetimeout/>
827
			<statetype>keep state</statetype>
828
			<os/>
829
			<protocol>udp</protocol>
830
			<source>
831
				<address>DC_DOMAINS</address>
832
			</source>
833
			<destination>
834
				<address>DC_DOMAINS</address>
835
				<port>DC_PORTS_UDP</port>
836
			</destination>
837
			<descr/>
838
		</rule>
839
		<rule>
840
			<id/>
841
			<type>pass</type>
842
			<interface>ADomains</interface>
843
			<tag/>
844
			<tagged/>
845
			<max/>
846
			<max-src-nodes/>
847
			<max-src-conn/>
848
			<max-src-states/>
849
			<statetimeout/>
850
			<statetype>keep state</statetype>
851
			<os/>
852
			<protocol>udp</protocol>
853
			<source>
854
				<address>DC_DOMAINS</address>
855
				<port>DC_PORTS_UDP</port>
856
			</source>
857
			<destination>
858
				<address>DC_DOMAINS</address>
859
			</destination>
860
			<descr/>
861
		</rule>
862
		<rule>
863
			<id/>
864
			<type>pass</type>
865
			<interface>ADomains</interface>
866
			<tag/>
867
			<tagged/>
868
			<max/>
869
			<max-src-nodes/>
870
			<max-src-conn/>
871
			<max-src-states/>
872
			<statetimeout/>
873
			<statetype>keep state</statetype>
874
			<os/>
875
			<protocol>tcp/udp</protocol>
876
			<source>
877
				<address>DC_DOMAINS</address>
878
			</source>
879
			<destination>
880
				<address>DC_DOMAINS</address>
881
				<port>DC_PORTS_TCP_UDP</port>
882
			</destination>
883
			<descr/>
884
		</rule>
885
		<rule>
886
			<id/>
887
			<type>block</type>
888
			<interface>ADomains</interface>
889
			<tag/>
890
			<tagged/>
891
			<max/>
892
			<max-src-nodes/>
893
			<max-src-conn/>
894
			<max-src-states/>
895
			<statetimeout/>
896
			<statetype>keep state</statetype>
897
			<os/>
898
			<source>
899
				<address>DC_DOMAINS</address>
900
			</source>
901
			<destination>
902
				<address>DC_DOMAINS</address>
903
			</destination>
904
			<log/>
905
			<descr/>
906
		</rule>
907
		<rule>
908
			<id/>
909
			<type>pass</type>
910
			<interface>DataCenter</interface>
911
			<tag/>
912
			<tagged/>
913
			<max/>
914
			<max-src-nodes/>
915
			<max-src-conn/>
916
			<max-src-states/>
917
			<statetimeout/>
918
			<statetype>keep state</statetype>
919
			<os/>
920
			<protocol>icmp</protocol>
921
			<source>
922
				<address>DataCenter_net</address>
923
			</source>
924
			<destination>
925
				<address>DC_DOMAINS</address>
926
			</destination>
927
			<descr/>
928
		</rule>
929
		<rule>
930
			<id/>
931
			<type>block</type>
932
			<interface>DataCenter</interface>
933
			<tag/>
934
			<tagged/>
935
			<max/>
936
			<max-src-nodes/>
937
			<max-src-conn/>
938
			<max-src-states/>
939
			<statetimeout/>
940
			<statetype>keep state</statetype>
941
			<os/>
942
			<protocol>tcp/udp</protocol>
943
			<source>
944
				<address>DataCenter_net</address>
945
			</source>
946
			<destination>
947
				<address>DC_DOMAINS</address>
948
				<port>DC_PORTS_Blocked</port>
949
			</destination>
950
			<log/>
951
			<descr/>
952
		</rule>
953
		<rule>
954
			<id/>
955
			<type>pass</type>
956
			<interface>DataCenter</interface>
957
			<tag/>
958
			<tagged/>
959
			<max/>
960
			<max-src-nodes/>
961
			<max-src-conn/>
962
			<max-src-states/>
963
			<statetimeout/>
964
			<statetype>keep state</statetype>
965
			<os/>
966
			<protocol>tcp</protocol>
967
			<source>
968
				<address>DataCenter_net</address>
969
			</source>
970
			<destination>
971
				<address>DC_DOMAINS</address>
972
				<port>DC_PORTS_TCP</port>
973
			</destination>
974
			<descr/>
975
		</rule>
976
		<rule>
977
			<id/>
978
			<type>pass</type>
979
			<interface>DataCenter</interface>
980
			<tag/>
981
			<tagged/>
982
			<max/>
983
			<max-src-nodes/>
984
			<max-src-conn/>
985
			<max-src-states/>
986
			<statetimeout/>
987
			<statetype>keep state</statetype>
988
			<os/>
989
			<protocol>udp</protocol>
990
			<source>
991
				<address>DataCenter_net</address>
992
			</source>
993
			<destination>
994
				<address>DC_DOMAINS</address>
995
				<port>DC_PORTS_UDP</port>
996
			</destination>
997
			<descr/>
998
		</rule>
999
		<rule>
1000
			<id/>
1001
			<type>pass</type>
1002
			<interface>DataCenter</interface>
1003
			<tag/>
1004
			<tagged/>
1005
			<max/>
1006
			<max-src-nodes/>
1007
			<max-src-conn/>
1008
			<max-src-states/>
1009
			<statetimeout/>
1010
			<statetype>keep state</statetype>
1011
			<os/>
1012
			<protocol>tcp/udp</protocol>
1013
			<source>
1014
				<address>DataCenter_net</address>
1015
			</source>
1016
			<destination>
1017
				<address>DC_DOMAINS</address>
1018
				<port>DC_PORTS_TCP_UDP</port>
1019
			</destination>
1020
			<descr/>
1021
		</rule>
1022
		<rule>
1023
			<id/>
1024
			<type>block</type>
1025
			<interface>DataCenter</interface>
1026
			<tag/>
1027
			<tagged/>
1028
			<max/>
1029
			<max-src-nodes/>
1030
			<max-src-conn/>
1031
			<max-src-states/>
1032
			<statetimeout/>
1033
			<statetype>keep state</statetype>
1034
			<os/>
1035
			<source>
1036
				<address>DataCenter_net</address>
1037
			</source>
1038
			<destination>
1039
				<address>DC_DOMAINS</address>
1040
			</destination>
1041
			<log/>
1042
			<descr/>
1043
		</rule>
1044
		<rule>
1045
			<id/>
1046
			<type>pass</type>
1047
			<interface>DataCenter</interface>
1048
			<tag/>
1049
			<tagged/>
1050
			<max/>
1051
			<max-src-nodes/>
1052
			<max-src-conn/>
1053
			<max-src-states/>
1054
			<statetimeout/>
1055
			<statetype>keep state</statetype>
1056
			<os/>
1057
			<protocol>icmp</protocol>
1058
			<source>
1059
				<address>DataCenter_net</address>
1060
			</source>
1061
			<destination>
1062
				<address>Desktop_Net</address>
1063
			</destination>
1064
			<descr/>
1065
		</rule>
1066
		<rule>
1067
			<id/>
1068
			<type>pass</type>
1069
			<interface>DataCenter</interface>
1070
			<tag/>
1071
			<tagged/>
1072
			<max/>
1073
			<max-src-nodes/>
1074
			<max-src-conn/>
1075
			<max-src-states/>
1076
			<statetimeout/>
1077
			<statetype>keep state</statetype>
1078
			<os/>
1079
			<protocol>udp</protocol>
1080
			<source>
1081
				<address>DataCenter_net</address>
1082
			</source>
1083
			<destination>
1084
				<address>Desktop_Net</address>
1085
				<port>DC_2_DESK_UDP</port>
1086
			</destination>
1087
			<descr/>
1088
		</rule>
1089
		<rule>
1090
			<id/>
1091
			<type>block</type>
1092
			<interface>DataCenter</interface>
1093
			<tag/>
1094
			<tagged/>
1095
			<max/>
1096
			<max-src-nodes/>
1097
			<max-src-conn/>
1098
			<max-src-states/>
1099
			<statetimeout/>
1100
			<statetype>keep state</statetype>
1101
			<os/>
1102
			<source>
1103
				<address>DataCenter_net</address>
1104
			</source>
1105
			<destination>
1106
				<address>Desktop_Net</address>
1107
			</destination>
1108
			<log/>
1109
			<descr/>
1110
		</rule>
1111
		<rule>
1112
			<id/>
1113
			<type>pass</type>
1114
			<interface>DataCenter</interface>
1115
			<tag/>
1116
			<tagged/>
1117
			<max/>
1118
			<max-src-nodes/>
1119
			<max-src-conn/>
1120
			<max-src-states/>
1121
			<statetimeout/>
1122
			<statetype>keep state</statetype>
1123
			<os/>
1124
			<protocol>icmp</protocol>
1125
			<source>
1126
				<address>DataCenter_net</address>
1127
			</source>
1128
			<destination>
1129
				<address>Recorder_Net</address>
1130
			</destination>
1131
			<descr/>
1132
		</rule>
1133
		<rule>
1134
			<id/>
1135
			<type>pass</type>
1136
			<interface>DataCenter</interface>
1137
			<tag/>
1138
			<tagged/>
1139
			<max/>
1140
			<max-src-nodes/>
1141
			<max-src-conn/>
1142
			<max-src-states/>
1143
			<statetimeout/>
1144
			<statetype>keep state</statetype>
1145
			<os/>
1146
			<protocol>tcp</protocol>
1147
			<source>
1148
				<address>DataCenter_net</address>
1149
			</source>
1150
			<destination>
1151
				<address>Recorder_Net</address>
1152
				<port>DC_2_REC_TCP</port>
1153
			</destination>
1154
			<descr/>
1155
		</rule>
1156
		<rule>
1157
			<id/>
1158
			<type>block</type>
1159
			<interface>DataCenter</interface>
1160
			<tag/>
1161
			<tagged/>
1162
			<max/>
1163
			<max-src-nodes/>
1164
			<max-src-conn/>
1165
			<max-src-states/>
1166
			<statetimeout/>
1167
			<statetype>keep state</statetype>
1168
			<os/>
1169
			<source>
1170
				<address>DataCenter_net</address>
1171
			</source>
1172
			<destination>
1173
				<address>Recorder_Net</address>
1174
			</destination>
1175
			<log/>
1176
			<descr/>
1177
		</rule>
1178
		<rule>
1179
			<id/>
1180
			<type>pass</type>
1181
			<interface>Desktops</interface>
1182
			<tag/>
1183
			<tagged/>
1184
			<max/>
1185
			<max-src-nodes/>
1186
			<max-src-conn/>
1187
			<max-src-states/>
1188
			<statetimeout/>
1189
			<statetype>keep state</statetype>
1190
			<os/>
1191
			<protocol>icmp</protocol>
1192
			<source>
1193
				<address>Desktop_Net</address>
1194
			</source>
1195
			<destination>
1196
				<any/>
1197
			</destination>
1198
			<descr/>
1199
		</rule>
1200
		<rule>
1201
			<id/>
1202
			<type>block</type>
1203
			<interface>Desktops</interface>
1204
			<tag/>
1205
			<tagged/>
1206
			<max/>
1207
			<max-src-nodes/>
1208
			<max-src-conn/>
1209
			<max-src-states/>
1210
			<statetimeout/>
1211
			<statetype>keep state</statetype>
1212
			<os/>
1213
			<protocol>tcp/udp</protocol>
1214
			<source>
1215
				<address>Desktop_Net</address>
1216
			</source>
1217
			<destination>
1218
				<address>DC_DOMAINS</address>
1219
				<port>DC_PORTS_Blocked</port>
1220
			</destination>
1221
			<log/>
1222
			<descr/>
1223
		</rule>
1224
		<rule>
1225
			<id/>
1226
			<type>pass</type>
1227
			<interface>Desktops</interface>
1228
			<tag/>
1229
			<tagged/>
1230
			<max/>
1231
			<max-src-nodes/>
1232
			<max-src-conn/>
1233
			<max-src-states/>
1234
			<statetimeout/>
1235
			<statetype>keep state</statetype>
1236
			<os/>
1237
			<protocol>tcp</protocol>
1238
			<source>
1239
				<address>Desktop_Net</address>
1240
			</source>
1241
			<destination>
1242
				<address>DC_DOMAINS</address>
1243
				<port>DC_PORTS_TCP</port>
1244
			</destination>
1245
			<descr/>
1246
		</rule>
1247
		<rule>
1248
			<id/>
1249
			<type>pass</type>
1250
			<interface>Desktops</interface>
1251
			<tag/>
1252
			<tagged/>
1253
			<max/>
1254
			<max-src-nodes/>
1255
			<max-src-conn/>
1256
			<max-src-states/>
1257
			<statetimeout/>
1258
			<statetype>keep state</statetype>
1259
			<os/>
1260
			<protocol>udp</protocol>
1261
			<source>
1262
				<address>Desktop_Net</address>
1263
			</source>
1264
			<destination>
1265
				<address>DC_DOMAINS</address>
1266
				<port>DC_PORTS_UDP</port>
1267
			</destination>
1268
			<descr/>
1269
		</rule>
1270
		<rule>
1271
			<id/>
1272
			<type>pass</type>
1273
			<interface>Desktops</interface>
1274
			<tag/>
1275
			<tagged/>
1276
			<max/>
1277
			<max-src-nodes/>
1278
			<max-src-conn/>
1279
			<max-src-states/>
1280
			<statetimeout/>
1281
			<statetype>keep state</statetype>
1282
			<os/>
1283
			<protocol>tcp/udp</protocol>
1284
			<source>
1285
				<address>Desktop_Net</address>
1286
			</source>
1287
			<destination>
1288
				<address>DC_DOMAINS</address>
1289
				<port>DC_PORTS_TCP_UDP</port>
1290
			</destination>
1291
			<descr/>
1292
		</rule>
1293
		<rule>
1294
			<id/>
1295
			<type>block</type>
1296
			<interface>Desktops</interface>
1297
			<tag/>
1298
			<tagged/>
1299
			<max/>
1300
			<max-src-nodes/>
1301
			<max-src-conn/>
1302
			<max-src-states/>
1303
			<statetimeout/>
1304
			<statetype>keep state</statetype>
1305
			<os/>
1306
			<source>
1307
				<address>Desktop_Net</address>
1308
			</source>
1309
			<destination>
1310
				<address>DC_DOMAINS</address>
1311
			</destination>
1312
			<log/>
1313
			<descr/>
1314
		</rule>
1315
		<rule>
1316
			<id/>
1317
			<type>pass</type>
1318
			<interface>Desktops</interface>
1319
			<tag/>
1320
			<tagged/>
1321
			<max/>
1322
			<max-src-nodes/>
1323
			<max-src-conn/>
1324
			<max-src-states/>
1325
			<statetimeout/>
1326
			<statetype>keep state</statetype>
1327
			<os/>
1328
			<protocol>tcp</protocol>
1329
			<source>
1330
				<address>Desktop_Net</address>
1331
			</source>
1332
			<destination>
1333
				<address>Recorder_Net</address>
1334
				<port>Desk_2_Rec_TCP</port>
1335
			</destination>
1336
			<descr/>
1337
		</rule>
1338
		<rule>
1339
			<id/>
1340
			<type>block</type>
1341
			<interface>Desktops</interface>
1342
			<tag/>
1343
			<tagged/>
1344
			<max/>
1345
			<max-src-nodes/>
1346
			<max-src-conn/>
1347
			<max-src-states/>
1348
			<statetimeout/>
1349
			<statetype>keep state</statetype>
1350
			<os/>
1351
			<source>
1352
				<address>Desktop_Net</address>
1353
			</source>
1354
			<destination>
1355
				<address>Recorder_Net</address>
1356
			</destination>
1357
			<log/>
1358
			<descr/>
1359
		</rule>
1360
		<rule>
1361
			<id/>
1362
			<type>pass</type>
1363
			<interface>Desktops</interface>
1364
			<tag/>
1365
			<tagged/>
1366
			<max/>
1367
			<max-src-nodes/>
1368
			<max-src-conn/>
1369
			<max-src-states/>
1370
			<statetimeout/>
1371
			<statetype>keep state</statetype>
1372
			<os/>
1373
			<protocol>icmp</protocol>
1374
			<source>
1375
				<address>Desktop_Net</address>
1376
			</source>
1377
			<destination>
1378
				<address>DataCenter_net</address>
1379
			</destination>
1380
			<descr/>
1381
		</rule>
1382
		<rule>
1383
			<id/>
1384
			<type>pass</type>
1385
			<interface>Desktops</interface>
1386
			<tag/>
1387
			<tagged/>
1388
			<max/>
1389
			<max-src-nodes/>
1390
			<max-src-conn/>
1391
			<max-src-states/>
1392
			<statetimeout/>
1393
			<statetype>keep state</statetype>
1394
			<os/>
1395
			<protocol>tcp</protocol>
1396
			<source>
1397
				<address>Desktop_Net</address>
1398
			</source>
1399
			<destination>
1400
				<address>DataCenter_net</address>
1401
				<port>Desk_2_DC_TCP</port>
1402
			</destination>
1403
			<descr/>
1404
		</rule>
1405
		<rule>
1406
			<id/>
1407
			<type>pass</type>
1408
			<interface>Desktops</interface>
1409
			<tag/>
1410
			<tagged/>
1411
			<max/>
1412
			<max-src-nodes/>
1413
			<max-src-conn/>
1414
			<max-src-states/>
1415
			<statetimeout/>
1416
			<statetype>keep state</statetype>
1417
			<os/>
1418
			<protocol>udp</protocol>
1419
			<source>
1420
				<address>Desktop_Net</address>
1421
			</source>
1422
			<destination>
1423
				<address>DataCenter_net</address>
1424
				<port>Desk_2_DC_UDP</port>
1425
			</destination>
1426
			<descr/>
1427
		</rule>
1428
		<rule>
1429
			<id/>
1430
			<type>block</type>
1431
			<interface>Desktops</interface>
1432
			<tag/>
1433
			<tagged/>
1434
			<max/>
1435
			<max-src-nodes/>
1436
			<max-src-conn/>
1437
			<max-src-states/>
1438
			<statetimeout/>
1439
			<statetype>keep state</statetype>
1440
			<os/>
1441
			<source>
1442
				<address>Desktop_Net</address>
1443
			</source>
1444
			<destination>
1445
				<address>DataCenter_net</address>
1446
			</destination>
1447
			<descr/>
1448
		</rule>
1449
		<rule>
1450
			<id/>
1451
			<type>pass</type>
1452
			<interface>Recorders</interface>
1453
			<tag/>
1454
			<tagged/>
1455
			<max/>
1456
			<max-src-nodes/>
1457
			<max-src-conn/>
1458
			<max-src-states/>
1459
			<statetimeout/>
1460
			<statetype>keep state</statetype>
1461
			<os/>
1462
			<protocol>icmp</protocol>
1463
			<source>
1464
				<address>Recorder_Net</address>
1465
			</source>
1466
			<destination>
1467
				<address>DC_DOMAINS</address>
1468
			</destination>
1469
			<descr/>
1470
		</rule>
1471
		<rule>
1472
			<id/>
1473
			<type>block</type>
1474
			<interface>Recorders</interface>
1475
			<tag/>
1476
			<tagged/>
1477
			<max/>
1478
			<max-src-nodes/>
1479
			<max-src-conn/>
1480
			<max-src-states/>
1481
			<statetimeout/>
1482
			<statetype>keep state</statetype>
1483
			<os/>
1484
			<protocol>tcp/udp</protocol>
1485
			<source>
1486
				<address>Recorder_Net</address>
1487
			</source>
1488
			<destination>
1489
				<address>DC_DOMAINS</address>
1490
				<port>DC_PORTS_Blocked</port>
1491
			</destination>
1492
			<log/>
1493
			<descr/>
1494
		</rule>
1495
		<rule>
1496
			<id/>
1497
			<type>pass</type>
1498
			<interface>Recorders</interface>
1499
			<tag/>
1500
			<tagged/>
1501
			<max/>
1502
			<max-src-nodes/>
1503
			<max-src-conn/>
1504
			<max-src-states/>
1505
			<statetimeout/>
1506
			<statetype>keep state</statetype>
1507
			<os/>
1508
			<protocol>tcp</protocol>
1509
			<source>
1510
				<address>Recorder_Net</address>
1511
			</source>
1512
			<destination>
1513
				<address>DC_DOMAINS</address>
1514
				<port>DC_PORTS_TCP</port>
1515
			</destination>
1516
			<descr/>
1517
		</rule>
1518
		<rule>
1519
			<id/>
1520
			<type>pass</type>
1521
			<interface>Recorders</interface>
1522
			<tag/>
1523
			<tagged/>
1524
			<max/>
1525
			<max-src-nodes/>
1526
			<max-src-conn/>
1527
			<max-src-states/>
1528
			<statetimeout/>
1529
			<statetype>keep state</statetype>
1530
			<os/>
1531
			<protocol>udp</protocol>
1532
			<source>
1533
				<address>Recorder_Net</address>
1534
			</source>
1535
			<destination>
1536
				<address>DC_DOMAINS</address>
1537
				<port>DC_PORTS_UDP</port>
1538
			</destination>
1539
			<descr/>
1540
		</rule>
1541
		<rule>
1542
			<id/>
1543
			<type>pass</type>
1544
			<interface>Recorders</interface>
1545
			<tag/>
1546
			<tagged/>
1547
			<max/>
1548
			<max-src-nodes/>
1549
			<max-src-conn/>
1550
			<max-src-states/>
1551
			<statetimeout/>
1552
			<statetype>keep state</statetype>
1553
			<os/>
1554
			<protocol>tcp/udp</protocol>
1555
			<source>
1556
				<address>Recorder_Net</address>
1557
			</source>
1558
			<destination>
1559
				<address>DC_DOMAINS</address>
1560
				<port>DC_PORTS_TCP_UDP</port>
1561
			</destination>
1562
			<descr/>
1563
		</rule>
1564
		<rule>
1565
			<id/>
1566
			<type>block</type>
1567
			<interface>Recorders</interface>
1568
			<tag/>
1569
			<tagged/>
1570
			<max/>
1571
			<max-src-nodes/>
1572
			<max-src-conn/>
1573
			<max-src-states/>
1574
			<statetimeout/>
1575
			<statetype>keep state</statetype>
1576
			<os/>
1577
			<source>
1578
				<address>Recorder_Net</address>
1579
			</source>
1580
			<destination>
1581
				<address>DC_DOMAINS</address>
1582
			</destination>
1583
			<log/>
1584
			<descr/>
1585
		</rule>
1586
		<rule>
1587
			<id/>
1588
			<type>pass</type>
1589
			<interface>Recorders</interface>
1590
			<tag/>
1591
			<tagged/>
1592
			<max/>
1593
			<max-src-nodes/>
1594
			<max-src-conn/>
1595
			<max-src-states/>
1596
			<statetimeout/>
1597
			<statetype>keep state</statetype>
1598
			<os/>
1599
			<protocol>icmp</protocol>
1600
			<source>
1601
				<address>Recorder_Net</address>
1602
			</source>
1603
			<destination>
1604
				<address>Desktop_Net</address>
1605
			</destination>
1606
			<descr/>
1607
		</rule>
1608
		<rule>
1609
			<id/>
1610
			<type>pass</type>
1611
			<interface>Recorders</interface>
1612
			<tag/>
1613
			<tagged/>
1614
			<max/>
1615
			<max-src-nodes/>
1616
			<max-src-conn/>
1617
			<max-src-states/>
1618
			<statetimeout/>
1619
			<statetype>keep state</statetype>
1620
			<os/>
1621
			<protocol>tcp</protocol>
1622
			<source>
1623
				<address>Recorder_Net</address>
1624
			</source>
1625
			<destination>
1626
				<address>Desktop_Net</address>
1627
				<port>Rec_2_Desk_TCP</port>
1628
			</destination>
1629
			<descr/>
1630
		</rule>
1631
		<rule>
1632
			<id/>
1633
			<type>pass</type>
1634
			<interface>Recorders</interface>
1635
			<tag/>
1636
			<tagged/>
1637
			<max/>
1638
			<max-src-nodes/>
1639
			<max-src-conn/>
1640
			<max-src-states/>
1641
			<statetimeout/>
1642
			<statetype>keep state</statetype>
1643
			<os/>
1644
			<protocol>udp</protocol>
1645
			<source>
1646
				<address>Recorder_Net</address>
1647
			</source>
1648
			<destination>
1649
				<address>Desktop_Net</address>
1650
				<port>Rec_2_Desk_UDP</port>
1651
			</destination>
1652
			<descr/>
1653
		</rule>
1654
		<rule>
1655
			<id/>
1656
			<type>block</type>
1657
			<interface>Recorders</interface>
1658
			<tag/>
1659
			<tagged/>
1660
			<max/>
1661
			<max-src-nodes/>
1662
			<max-src-conn/>
1663
			<max-src-states/>
1664
			<statetimeout/>
1665
			<statetype>keep state</statetype>
1666
			<os/>
1667
			<source>
1668
				<address>Recorder_Net</address>
1669
			</source>
1670
			<destination>
1671
				<address>Desktop_Net</address>
1672
			</destination>
1673
			<log/>
1674
			<descr/>
1675
		</rule>
1676
		<rule>
1677
			<id/>
1678
			<type>pass</type>
1679
			<interface>Recorders</interface>
1680
			<tag/>
1681
			<tagged/>
1682
			<max/>
1683
			<max-src-nodes/>
1684
			<max-src-conn/>
1685
			<max-src-states/>
1686
			<statetimeout/>
1687
			<statetype>keep state</statetype>
1688
			<os/>
1689
			<protocol>icmp</protocol>
1690
			<source>
1691
				<address>Recorder_Net</address>
1692
			</source>
1693
			<destination>
1694
				<address>DataCenter_net</address>
1695
			</destination>
1696
			<descr/>
1697
		</rule>
1698
		<rule>
1699
			<id/>
1700
			<type>pass</type>
1701
			<interface>Recorders</interface>
1702
			<tag/>
1703
			<tagged/>
1704
			<max/>
1705
			<max-src-nodes/>
1706
			<max-src-conn/>
1707
			<max-src-states/>
1708
			<statetimeout/>
1709
			<statetype>keep state</statetype>
1710
			<os/>
1711
			<protocol>tcp</protocol>
1712
			<source>
1713
				<address>Recorder_Net</address>
1714
			</source>
1715
			<destination>
1716
				<address>DataCenter_net</address>
1717
				<port>REC_2_DC_TCP</port>
1718
			</destination>
1719
			<descr/>
1720
		</rule>
1721
		<rule>
1722
			<id/>
1723
			<type>block</type>
1724
			<interface>Recorders</interface>
1725
			<tag/>
1726
			<tagged/>
1727
			<max/>
1728
			<max-src-nodes/>
1729
			<max-src-conn/>
1730
			<max-src-states/>
1731
			<statetimeout/>
1732
			<statetype>keep state</statetype>
1733
			<os/>
1734
			<source>
1735
				<address>Recorder_Net</address>
1736
			</source>
1737
			<destination>
1738
				<address>DataCenter_net</address>
1739
			</destination>
1740
			<log/>
1741
			<descr/>
1742
		</rule>
1743
		<rule>
1744
			<id/>
1745
			<type>pass</type>
1746
			<interface>opt1</interface>
1747
			<tag/>
1748
			<tagged/>
1749
			<max/>
1750
			<max-src-nodes/>
1751
			<max-src-conn/>
1752
			<max-src-states/>
1753
			<statetimeout/>
1754
			<statetype>keep state</statetype>
1755
			<os/>
1756
			<source>
1757
				<any/>
1758
			</source>
1759
			<destination>
1760
				<any/>
1761
			</destination>
1762
			<descr/>
1763
		</rule>
1764
		<rule>
1765
			<id/>
1766
			<type>pass</type>
1767
			<interface>opt2</interface>
1768
			<tag/>
1769
			<tagged/>
1770
			<max/>
1771
			<max-src-nodes/>
1772
			<max-src-conn/>
1773
			<max-src-states/>
1774
			<statetimeout/>
1775
			<statetype>keep state</statetype>
1776
			<os/>
1777
			<source>
1778
				<any/>
1779
			</source>
1780
			<destination>
1781
				<any/>
1782
			</destination>
1783
			<descr/>
1784
		</rule>
1785
		<rule>
1786
			<id/>
1787
			<type>pass</type>
1788
			<interface>opt3</interface>
1789
			<tag/>
1790
			<tagged/>
1791
			<max/>
1792
			<max-src-nodes/>
1793
			<max-src-conn/>
1794
			<max-src-states/>
1795
			<statetimeout/>
1796
			<statetype>keep state</statetype>
1797
			<os/>
1798
			<source>
1799
				<any/>
1800
			</source>
1801
			<destination>
1802
				<any/>
1803
			</destination>
1804
			<descr/>
1805
		</rule>
1806
		<rule>
1807
			<id/>
1808
			<type>pass</type>
1809
			<interface>opt4</interface>
1810
			<tag/>
1811
			<tagged/>
1812
			<max/>
1813
			<max-src-nodes/>
1814
			<max-src-conn/>
1815
			<max-src-states/>
1816
			<statetimeout/>
1817
			<statetype>keep state</statetype>
1818
			<os/>
1819
			<source>
1820
				<any/>
1821
			</source>
1822
			<destination>
1823
				<any/>
1824
			</destination>
1825
			<descr/>
1826
		</rule>
1827
		<rule>
1828
			<id/>
1829
			<type>pass</type>
1830
			<interface>opt5</interface>
1831
			<tag/>
1832
			<tagged/>
1833
			<max/>
1834
			<max-src-nodes/>
1835
			<max-src-conn/>
1836
			<max-src-states/>
1837
			<statetimeout/>
1838
			<statetype>keep state</statetype>
1839
			<os/>
1840
			<source>
1841
				<any/>
1842
			</source>
1843
			<destination>
1844
				<any/>
1845
			</destination>
1846
			<descr/>
1847
		</rule>
1848
		<rule>
1849
			<id/>
1850
			<type>pass</type>
1851
			<interface>opt6</interface>
1852
			<tag/>
1853
			<tagged/>
1854
			<max/>
1855
			<max-src-nodes/>
1856
			<max-src-conn/>
1857
			<max-src-states/>
1858
			<statetimeout/>
1859
			<statetype>keep state</statetype>
1860
			<os/>
1861
			<source>
1862
				<any/>
1863
			</source>
1864
			<destination>
1865
				<any/>
1866
			</destination>
1867
			<descr/>
1868
		</rule>
1869
		<rule>
1870
			<id/>
1871
			<type>pass</type>
1872
			<interface>opt7</interface>
1873
			<tag/>
1874
			<tagged/>
1875
			<max/>
1876
			<max-src-nodes/>
1877
			<max-src-conn/>
1878
			<max-src-states/>
1879
			<statetimeout/>
1880
			<statetype>keep state</statetype>
1881
			<os/>
1882
			<source>
1883
				<any/>
1884
			</source>
1885
			<destination>
1886
				<any/>
1887
			</destination>
1888
			<descr/>
1889
		</rule>
1890
		<rule>
1891
			<id/>
1892
			<type>pass</type>
1893
			<interface>opt8</interface>
1894
			<tag/>
1895
			<tagged/>
1896
			<max/>
1897
			<max-src-nodes/>
1898
			<max-src-conn/>
1899
			<max-src-states/>
1900
			<statetimeout/>
1901
			<statetype>keep state</statetype>
1902
			<os/>
1903
			<source>
1904
				<any/>
1905
			</source>
1906
			<destination>
1907
				<any/>
1908
			</destination>
1909
			<descr/>
1910
		</rule>
1911
		<rule>
1912
			<id/>
1913
			<type>pass</type>
1914
			<interface>opt9</interface>
1915
			<tag/>
1916
			<tagged/>
1917
			<max/>
1918
			<max-src-nodes/>
1919
			<max-src-conn/>
1920
			<max-src-states/>
1921
			<statetimeout/>
1922
			<statetype>keep state</statetype>
1923
			<os/>
1924
			<source>
1925
				<any/>
1926
			</source>
1927
			<destination>
1928
				<any/>
1929
			</destination>
1930
			<descr/>
1931
		</rule>
1932
		<rule>
1933
			<id/>
1934
			<type>pass</type>
1935
			<interface>opt10</interface>
1936
			<tag/>
1937
			<tagged/>
1938
			<max/>
1939
			<max-src-nodes/>
1940
			<max-src-conn/>
1941
			<max-src-states/>
1942
			<statetimeout/>
1943
			<statetype>keep state</statetype>
1944
			<os/>
1945
			<source>
1946
				<any/>
1947
			</source>
1948
			<destination>
1949
				<any/>
1950
			</destination>
1951
			<descr/>
1952
		</rule>
1953
		<rule>
1954
			<id/>
1955
			<type>pass</type>
1956
			<interface>opt11</interface>
1957
			<tag/>
1958
			<tagged/>
1959
			<max/>
1960
			<max-src-nodes/>
1961
			<max-src-conn/>
1962
			<max-src-states/>
1963
			<statetimeout/>
1964
			<statetype>keep state</statetype>
1965
			<os/>
1966
			<source>
1967
				<any/>
1968
			</source>
1969
			<destination>
1970
				<any/>
1971
			</destination>
1972
			<descr/>
1973
		</rule>
1974
		<rule>
1975
			<id/>
1976
			<type>pass</type>
1977
			<interface>opt12</interface>
1978
			<tag/>
1979
			<tagged/>
1980
			<max/>
1981
			<max-src-nodes/>
1982
			<max-src-conn/>
1983
			<max-src-states/>
1984
			<statetimeout/>
1985
			<statetype>keep state</statetype>
1986
			<os/>
1987
			<source>
1988
				<any/>
1989
			</source>
1990
			<destination>
1991
				<any/>
1992
			</destination>
1993
			<descr/>
1994
		</rule>
1995
		<rule>
1996
			<id/>
1997
			<type>pass</type>
1998
			<interface>opt13</interface>
1999
			<tag/>
2000
			<tagged/>
2001
			<max/>
2002
			<max-src-nodes/>
2003
			<max-src-conn/>
2004
			<max-src-states/>
2005
			<statetimeout/>
2006
			<statetype>keep state</statetype>
2007
			<os/>
2008
			<source>
2009
				<any/>
2010
			</source>
2011
			<destination>
2012
				<any/>
2013
			</destination>
2014
			<descr/>
2015
		</rule>
2016
		<rule>
2017
			<id/>
2018
			<type>pass</type>
2019
			<interface>opt14</interface>
2020
			<tag/>
2021
			<tagged/>
2022
			<max/>
2023
			<max-src-nodes/>
2024
			<max-src-conn/>
2025
			<max-src-states/>
2026
			<statetimeout/>
2027
			<statetype>keep state</statetype>
2028
			<os/>
2029
			<source>
2030
				<any/>
2031
			</source>
2032
			<destination>
2033
				<any/>
2034
			</destination>
2035
			<descr/>
2036
		</rule>
2037
		<rule>
2038
			<id/>
2039
			<type>pass</type>
2040
			<interface>opt15</interface>
2041
			<tag/>
2042
			<tagged/>
2043
			<max/>
2044
			<max-src-nodes/>
2045
			<max-src-conn/>
2046
			<max-src-states/>
2047
			<statetimeout/>
2048
			<statetype>keep state</statetype>
2049
			<os/>
2050
			<source>
2051
				<any/>
2052
			</source>
2053
			<destination>
2054
				<any/>
2055
			</destination>
2056
			<descr/>
2057
		</rule>
2058
		<rule>
2059
			<id/>
2060
			<type>pass</type>
2061
			<interface>opt16</interface>
2062
			<tag/>
2063
			<tagged/>
2064
			<max/>
2065
			<max-src-nodes/>
2066
			<max-src-conn/>
2067
			<max-src-states/>
2068
			<statetimeout/>
2069
			<statetype>keep state</statetype>
2070
			<os/>
2071
			<source>
2072
				<address>monitoring_server</address>
2073
			</source>
2074
			<destination>
2075
				<any/>
2076
			</destination>
2077
			<descr/>
2078
		</rule>
2079
		<rule>
2080
			<id/>
2081
			<type>pass</type>
2082
			<interface>opt16</interface>
2083
			<ipprotocol>inet</ipprotocol>
2084
			<tag/>
2085
			<tagged/>
2086
			<max/>
2087
			<max-src-nodes/>
2088
			<max-src-conn/>
2089
			<max-src-states/>
2090
			<statetimeout/>
2091
			<statetype>keep state</statetype>
2092
			<os/>
2093
			<source>
2094
				<any/>
2095
			</source>
2096
			<destination>
2097
				<any/>
2098
			</destination>
2099
			<descr/>
2100
			<updated>
2101
				<time>1376811478</time>
2102
				<username>admin@10.61.21.63</username>
2103
			</updated>
2104
		</rule>
2105
		<rule>
2106
			<id/>
2107
			<type>block</type>
2108
			<interface>opt16</interface>
2109
			<tag/>
2110
			<tagged/>
2111
			<max/>
2112
			<max-src-nodes/>
2113
			<max-src-conn/>
2114
			<max-src-states/>
2115
			<statetimeout/>
2116
			<statetype>keep state</statetype>
2117
			<os/>
2118
			<source>
2119
				<any/>
2120
			</source>
2121
			<destination>
2122
				<any/>
2123
			</destination>
2124
			<log/>
2125
			<descr/>
2126
			<disabled/>
2127
		</rule>
2128
		<rule>
2129
			<id/>
2130
			<type>pass</type>
2131
			<interface>opt17</interface>
2132
			<tag/>
2133
			<tagged/>
2134
			<max/>
2135
			<max-src-nodes/>
2136
			<max-src-conn/>
2137
			<max-src-states/>
2138
			<statetimeout/>
2139
			<statetype>keep state</statetype>
2140
			<os/>
2141
			<source>
2142
				<address>monitoring_server</address>
2143
			</source>
2144
			<destination>
2145
				<any/>
2146
			</destination>
2147
			<descr/>
2148
		</rule>
2149
		<rule>
2150
			<id/>
2151
			<type>pass</type>
2152
			<interface>opt17</interface>
2153
			<ipprotocol>inet</ipprotocol>
2154
			<tag/>
2155
			<tagged/>
2156
			<max/>
2157
			<max-src-nodes/>
2158
			<max-src-conn/>
2159
			<max-src-states/>
2160
			<statetimeout/>
2161
			<statetype>keep state</statetype>
2162
			<os/>
2163
			<source>
2164
				<any/>
2165
			</source>
2166
			<destination>
2167
				<any/>
2168
			</destination>
2169
			<descr/>
2170
			<updated>
2171
				<time>1376811740</time>
2172
				<username>admin@10.61.21.63</username>
2173
			</updated>
2174
		</rule>
2175
		<rule>
2176
			<id/>
2177
			<type>block</type>
2178
			<interface>opt17</interface>
2179
			<tag/>
2180
			<tagged/>
2181
			<max/>
2182
			<max-src-nodes/>
2183
			<max-src-conn/>
2184
			<max-src-states/>
2185
			<statetimeout/>
2186
			<statetype>keep state</statetype>
2187
			<os/>
2188
			<source>
2189
				<any/>
2190
			</source>
2191
			<destination>
2192
				<any/>
2193
			</destination>
2194
			<log/>
2195
			<descr/>
2196
			<disabled/>
2197
		</rule>
2198
		<rule>
2199
			<id/>
2200
			<type>pass</type>
2201
			<interface>opt18</interface>
2202
			<tag/>
2203
			<tagged/>
2204
			<max/>
2205
			<max-src-nodes/>
2206
			<max-src-conn/>
2207
			<max-src-states/>
2208
			<statetimeout/>
2209
			<statetype>keep state</statetype>
2210
			<os/>
2211
			<source>
2212
				<any/>
2213
			</source>
2214
			<destination>
2215
				<any/>
2216
			</destination>
2217
			<descr/>
2218
		</rule>
2219
		<rule>
2220
			<id/>
2221
			<type>pass</type>
2222
			<interface>opt19</interface>
2223
			<tag/>
2224
			<tagged/>
2225
			<max/>
2226
			<max-src-nodes/>
2227
			<max-src-conn/>
2228
			<max-src-states/>
2229
			<statetimeout/>
2230
			<statetype>keep state</statetype>
2231
			<os/>
2232
			<source>
2233
				<any/>
2234
			</source>
2235
			<destination>
2236
				<any/>
2237
			</destination>
2238
			<descr/>
2239
		</rule>
2240
		<rule>
2241
			<id/>
2242
			<type>pass</type>
2243
			<interface>opt20</interface>
2244
			<tag/>
2245
			<tagged/>
2246
			<max/>
2247
			<max-src-nodes/>
2248
			<max-src-conn/>
2249
			<max-src-states/>
2250
			<statetimeout/>
2251
			<statetype>keep state</statetype>
2252
			<os/>
2253
			<source>
2254
				<any/>
2255
			</source>
2256
			<destination>
2257
				<any/>
2258
			</destination>
2259
			<descr/>
2260
		</rule>
2261
		<rule>
2262
			<id/>
2263
			<type>pass</type>
2264
			<interface>opt21</interface>
2265
			<tag/>
2266
			<tagged/>
2267
			<max/>
2268
			<max-src-nodes/>
2269
			<max-src-conn/>
2270
			<max-src-states/>
2271
			<statetimeout/>
2272
			<statetype>keep state</statetype>
2273
			<os/>
2274
			<source>
2275
				<any/>
2276
			</source>
2277
			<destination>
2278
				<any/>
2279
			</destination>
2280
			<descr/>
2281
		</rule>
2282
		<rule>
2283
			<id/>
2284
			<type>pass</type>
2285
			<interface>opt22</interface>
2286
			<tag/>
2287
			<tagged/>
2288
			<max/>
2289
			<max-src-nodes/>
2290
			<max-src-conn/>
2291
			<max-src-states/>
2292
			<statetimeout/>
2293
			<statetype>keep state</statetype>
2294
			<os/>
2295
			<source>
2296
				<any/>
2297
			</source>
2298
			<destination>
2299
				<any/>
2300
			</destination>
2301
			<descr/>
2302
		</rule>
2303
		<rule>
2304
			<id/>
2305
			<type>pass</type>
2306
			<interface>opt23</interface>
2307
			<ipprotocol>inet</ipprotocol>
2308
			<tag/>
2309
			<tagged/>
2310
			<max/>
2311
			<max-src-nodes/>
2312
			<max-src-conn/>
2313
			<max-src-states/>
2314
			<statetimeout/>
2315
			<statetype>keep state</statetype>
2316
			<os/>
2317
			<source>
2318
				<any/>
2319
			</source>
2320
			<destination>
2321
				<any/>
2322
			</destination>
2323
			<descr/>
2324
			<updated>
2325
				<time>1379087304</time>
2326
				<username>admin@10.161.124.2</username>
2327
			</updated>
2328
			<created>
2329
				<time>1379087304</time>
2330
				<username>admin@10.161.124.2</username>
2331
			</created>
2332
		</rule>
2333
		<rule>
2334
			<id/>
2335
			<type>pass</type>
2336
			<interface>opt24</interface>
2337
			<ipprotocol>inet</ipprotocol>
2338
			<tag/>
2339
			<tagged/>
2340
			<max/>
2341
			<max-src-nodes/>
2342
			<max-src-conn/>
2343
			<max-src-states/>
2344
			<statetimeout/>
2345
			<statetype>keep state</statetype>
2346
			<os/>
2347
			<source>
2348
				<any/>
2349
			</source>
2350
			<destination>
2351
				<any/>
2352
			</destination>
2353
			<descr/>
2354
			<updated>
2355
				<time>1380722743</time>
2356
				<username>admin@10.61.21.63</username>
2357
			</updated>
2358
			<created>
2359
				<time>1380722743</time>
2360
				<username>admin@10.61.21.63</username>
2361
			</created>
2362
		</rule>
2363
		<rule>
2364
			<id/>
2365
			<type>pass</type>
2366
			<interface>opt25</interface>
2367
			<ipprotocol>inet</ipprotocol>
2368
			<tag/>
2369
			<tagged/>
2370
			<max/>
2371
			<max-src-nodes/>
2372
			<max-src-conn/>
2373
			<max-src-states/>
2374
			<statetimeout/>
2375
			<statetype>keep state</statetype>
2376
			<os/>
2377
			<source>
2378
				<network>opt25</network>
2379
			</source>
2380
			<destination>
2381
				<address>DMZ_Domains</address>
2382
			</destination>
2383
			<descr/>
2384
			<created>
2385
				<time>1383219793</time>
2386
				<username>admin@10.61.21.63</username>
2387
			</created>
2388
			<updated>
2389
				<time>1383477451</time>
2390
				<username>admin@10.61.21.63</username>
2391
			</updated>
2392
		</rule>
2393
		<rule>
2394
			<id/>
2395
			<type>pass</type>
2396
			<interface>opt25</interface>
2397
			<ipprotocol>inet</ipprotocol>
2398
			<tag/>
2399
			<tagged/>
2400
			<max/>
2401
			<max-src-nodes/>
2402
			<max-src-conn/>
2403
			<max-src-states/>
2404
			<statetimeout/>
2405
			<statetype>keep state</statetype>
2406
			<os/>
2407
			<source>
2408
				<network>opt25</network>
2409
			</source>
2410
			<destination>
2411
				<address>McAfee_Servers</address>
2412
			</destination>
2413
			<descr/>
2414
			<updated>
2415
				<time>1383477856</time>
2416
				<username>admin@10.61.21.63</username>
2417
			</updated>
2418
			<created>
2419
				<time>1383477856</time>
2420
				<username>admin@10.61.21.63</username>
2421
			</created>
2422
		</rule>
2423
		<rule>
2424
			<id/>
2425
			<type>pass</type>
2426
			<interface>opt25</interface>
2427
			<ipprotocol>inet</ipprotocol>
2428
			<tag/>
2429
			<tagged/>
2430
			<max/>
2431
			<max-src-nodes/>
2432
			<max-src-conn/>
2433
			<max-src-states/>
2434
			<statetimeout/>
2435
			<statetype>keep state</statetype>
2436
			<os/>
2437
			<source>
2438
				<network>opt25</network>
2439
			</source>
2440
			<destination>
2441
				<address>DMZ_ALLOW_Servers</address>
2442
			</destination>
2443
			<descr/>
2444
			<created>
2445
				<time>1384250176</time>
2446
				<username>Easy Rule</username>
2447
			</created>
2448
			<updated>
2449
				<time>1384254660</time>
2450
				<username>admin@10.61.21.63</username>
2451
			</updated>
2452
		</rule>
2453
		<rule>
2454
			<id/>
2455
			<type>pass</type>
2456
			<interface>opt25</interface>
2457
			<ipprotocol>inet</ipprotocol>
2458
			<tag/>
2459
			<tagged/>
2460
			<max/>
2461
			<max-src-nodes/>
2462
			<max-src-conn/>
2463
			<max-src-states/>
2464
			<statetimeout/>
2465
			<statetype>keep state</statetype>
2466
			<os/>
2467
			<source>
2468
				<network>opt25</network>
2469
			</source>
2470
			<destination>
2471
				<address>10.161.222.51</address>
2472
			</destination>
2473
			<descr/>
2474
			<updated>
2475
				<time>1384182192</time>
2476
				<username>admin@10.61.21.63</username>
2477
			</updated>
2478
			<created>
2479
				<time>1384182192</time>
2480
				<username>admin@10.61.21.63</username>
2481
			</created>
2482
			<disabled/>
2483
		</rule>
2484
		<rule>
2485
			<id/>
2486
			<type>pass</type>
2487
			<interface>opt25</interface>
2488
			<ipprotocol>inet</ipprotocol>
2489
			<tag/>
2490
			<tagged/>
2491
			<max/>
2492
			<max-src-nodes/>
2493
			<max-src-conn/>
2494
			<max-src-states/>
2495
			<statetimeout/>
2496
			<statetype>keep state</statetype>
2497
			<os/>
2498
			<protocol>tcp/udp</protocol>
2499
			<source>
2500
				<network>opt25</network>
2501
			</source>
2502
			<destination>
2503
				<any/>
2504
				<port>389</port>
2505
			</destination>
2506
			<descr/>
2507
			<created>
2508
				<time>1383477572</time>
2509
				<username>admin@10.61.21.63</username>
2510
			</created>
2511
			<updated>
2512
				<time>1383477609</time>
2513
				<username>admin@10.61.21.63</username>
2514
			</updated>
2515
		</rule>
2516
		<rule>
2517
			<id/>
2518
			<type>pass</type>
2519
			<interface>opt25</interface>
2520
			<ipprotocol>inet</ipprotocol>
2521
			<tag/>
2522
			<tagged/>
2523
			<max/>
2524
			<max-src-nodes/>
2525
			<max-src-conn/>
2526
			<max-src-states/>
2527
			<statetimeout/>
2528
			<statetype>keep state</statetype>
2529
			<os/>
2530
			<source>
2531
				<network>opt25</network>
2532
			</source>
2533
			<destination>
2534
				<network>opt25</network>
2535
			</destination>
2536
			<descr/>
2537
			<updated>
2538
				<time>1383475855</time>
2539
				<username>admin@10.61.21.63</username>
2540
			</updated>
2541
			<created>
2542
				<time>1383475855</time>
2543
				<username>admin@10.61.21.63</username>
2544
			</created>
2545
		</rule>
2546
		<rule>
2547
			<id/>
2548
			<type>block</type>
2549
			<interface>opt25</interface>
2550
			<ipprotocol>inet</ipprotocol>
2551
			<tag/>
2552
			<tagged/>
2553
			<max/>
2554
			<max-src-nodes/>
2555
			<max-src-conn/>
2556
			<max-src-states/>
2557
			<statetimeout/>
2558
			<statetype>keep state</statetype>
2559
			<os/>
2560
			<source>
2561
				<network>opt25</network>
2562
			</source>
2563
			<destination>
2564
				<address>10.0.0.0/8</address>
2565
			</destination>
2566
			<log/>
2567
			<descr/>
2568
			<created>
2569
				<time>1383219862</time>
2570
				<username>admin@10.61.21.63</username>
2571
			</created>
2572
			<updated>
2573
				<time>1383476153</time>
2574
				<username>admin@10.61.21.63</username>
2575
			</updated>
2576
		</rule>
2577
	</filter>
2578
	<ipsec>
2579
		<preferoldsa/>
2580
	</ipsec>
2581
	<aliases>
2582
		<alias>
2583
			<name>DataCenter_net</name>
2584
			<address>10.165.245.0/24</address>
2585
			<descr/>
2586
			<type>network</type>
2587
			<detail><![CDATA[Entry added Wed, 20 Jun 2012 15:08:04 +0300]]></detail>
2588
		</alias>
2589
		<alias>
2590
			<name>DC_2_DESK_UDP</name>
2591
			<address>2701</address>
2592
			<descr/>
2593
			<type>port</type>
2594
			<detail><![CDATA[SIP]]></detail>
2595
		</alias>
2596
		<alias>
2597
			<name>DC_2_REC_TCP</name>
2598
			<address>8080 8443 29500:29504 29510 29520</address>
2599
			<descr/>
2600
			<type>port</type>
2601
			<detail><![CDATA[HTTP||HTTPS||Entry added Wed, 20 Jun 2012 16:23:30 +0300||Entry added Wed, 20 Jun 2012 16:23:30 +0300||Entry added Wed, 20 Jun 2012 16:23:30 +0300]]></detail>
2602
		</alias>
2603
		<alias>
2604
			<name>DC_DOMAINS</name>
2605
			<address>10.165.245.200 10.165.246.200 10.165.243.200 10.165.241.200 10.165.240.200</address>
2606
			<descr/>
2607
			<type>host</type>
2608
			<detail><![CDATA[DC_MAIN||DC_TLV_MAIN||DC_HAIFA_MAIN||DC_HERTZ_SUBMAIN||DC Submain]]></detail>
2609
		</alias>
2610
		<alias>
2611
			<name>DC_HAIFA_MAIN</name>
2612
			<address>10.165.243.200</address>
2613
			<descr/>
2614
			<type>host</type>
2615
			<detail><![CDATA[Entry added Thu, 31 May 2012 15:42:09 +0300]]></detail>
2616
		</alias>
2617
		<alias>
2618
			<name>DC_HERTZ_SUBMAIN</name>
2619
			<address>10.165.241.200</address>
2620
			<descr/>
2621
			<type>host</type>
2622
			<detail><![CDATA[Entry added Thu, 31 May 2012 15:43:14 +0300]]></detail>
2623
		</alias>
2624
		<alias>
2625
			<name>DC_MAIN</name>
2626
			<address>10.165.254.200</address>
2627
			<descr/>
2628
			<type>host</type>
2629
			<detail><![CDATA[Entry added Thu, 31 May 2012 15:40:22 +0300]]></detail>
2630
		</alias>
2631
		<alias>
2632
			<name>DC_MAIN_Domains</name>
2633
			<address>10.165.245.200 10.165.246.200 10.165.243.200</address>
2634
			<descr/>
2635
			<type>host</type>
2636
			<detail><![CDATA[DC_MAIN||DC_TLV_MAIN||DC_HAIFA_MAIN]]></detail>
2637
		</alias>
2638
		<alias>
2639
			<name>DC_PORTS_Blocked</name>
2640
			<address>3389</address>
2641
			<descr/>
2642
			<type>port</type>
2643
			<detail><![CDATA[MS RDP]]></detail>
2644
		</alias>
2645
		<alias>
2646
			<name>DC_PORTS_TCP</name>
2647
			<address>445 6892 6893 6894</address>
2648
			<descr/>
2649
			<type>port</type>
2650
			<detail><![CDATA[Microsoft SMB||LSA RPC ||Net Logon RPC||FRS Replication]]></detail>
2651
		</alias>
2652
		<alias>
2653
			<name>DC_PORTS_TCP_UDP</name>
2654
			<address>53 88 135 138 139 389 464 3268 3269 137</address>
2655
			<descr/>
2656
			<type>port</type>
2657
			<detail><![CDATA[DNS||Kerberos authentication system||Portmapper||NetBIOS Datagram Service||NetBIOS Session Service||LDAP||Kerberos Change/Set password||MS GC||MS GC over SSL||NetBIOS Name Service]]></detail>
2658
		</alias>
2659
		<alias>
2660
			<name>DC_PORTS_UDP</name>
2661
			<address>123 53</address>
2662
			<descr/>
2663
			<type>port</type>
2664
			<detail><![CDATA[NTP||DNS]]></detail>
2665
		</alias>
2666
		<alias>
2667
			<name>DC_SUBMAIN</name>
2668
			<address>10.165.240.200</address>
2669
			<descr/>
2670
			<type>host</type>
2671
			<detail><![CDATA[Entry added Thu, 31 May 2012 15:42:34 +0300]]></detail>
2672
		</alias>
2673
		<alias>
2674
			<name>DC_SUBMAIN_Domains</name>
2675
			<address>10.165.241.200 10.165.240.200</address>
2676
			<descr/>
2677
			<type>host</type>
2678
			<detail><![CDATA[DC_HERTZ_SUBMAIN||DC Submain]]></detail>
2679
		</alias>
2680
		<alias>
2681
			<name>DC_TLV_MAIN</name>
2682
			<address>10.165.246.200</address>
2683
			<descr/>
2684
			<type>host</type>
2685
			<detail><![CDATA[Entry added Thu, 31 May 2012 15:41:00 +0300]]></detail>
2686
		</alias>
2687
		<alias>
2688
			<name>Desk_2_DC_TCP</name>
2689
			<address>80 443 1433 4715 5080 6400:6402 7001:7002 8383 8387 9300 9443</address>
2690
			<descr/>
2691
			<type>port</type>
2692
			<detail><![CDATA[HTTP||HTTPS||MSSQL||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300||Entry added Tue, 19 Jun 2012 15:17:48 +0300]]></detail>
2693
		</alias>
2694
		<alias>
2695
			<name>Desk_2_DC_UDP</name>
2696
			<address>5060</address>
2697
			<descr/>
2698
			<type>port</type>
2699
			<detail><![CDATA[SIP]]></detail>
2700
		</alias>
2701
		<alias>
2702
			<name>Desk_2_Rec_TCP</name>
2703
			<address>3020 29500:29501 29520 29522 3389</address>
2704
			<descr/>
2705
			<type>port</type>
2706
			<detail><![CDATA[Entry added Thu, 14 Jun 2012 10:45:51 +0300||Entry added Thu, 14 Jun 2012 10:45:51 +0300||Entry added Thu, 14 Jun 2012 10:45:51 +0300||Entry added Thu, 14 Jun 2012 10:45:51 +0300||MS RDP]]></detail>
2707
		</alias>
2708
		<alias>
2709
			<name>Desktop_Net</name>
2710
			<address>10.165.242.0/24 10.165.244.0/24 10.165.247.0/24</address>
2711
			<descr/>
2712
			<type>network</type>
2713
			<detail><![CDATA[Site B||Site A||DataCenter]]></detail>
2714
		</alias>
2715
		<alias>
2716
			<name>DMZ_ALLOW_Servers</name>
2717
			<address>10.161.124.158 10.161.124.203</address>
2718
			<descr/>
2719
			<type>host</type>
2720
			<detail><![CDATA[RR DB Server||RR DB Server]]></detail>
2721
		</alias>
2722
		<alias>
2723
			<name>DMZ_Domains</name>
2724
			<address>EISLAB_IL_DCs 10.61.240.121 10.61.240.131</address>
2725
			<descr/>
2726
			<type>host</type>
2727
			<detail><![CDATA[Entry added Sun, 03 Nov 2013 13:16:35 +0200||verint||verint]]></detail>
2728
		</alias>
2729
		<alias>
2730
			<name>EIS_LAB_FLOOR2</name>
2731
			<address>10.161.62.0/24 10.161.134.0/24 10.161.135.0/24 10.161.60.0/24 10.161.61.0/24 10.161.63.0/24 10.161.64.0/24</address>
2732
			<descr/>
2733
			<type>network</type>
2734
			<detail><![CDATA[Entry added Wed, 26 Dec 2012 23:00:22 +0200||Entry added Wed, 26 Dec 2012 23:00:22 +0200||Entry added Wed, 26 Dec 2012 23:00:22 +0200||Entry added Thu, 27 Dec 2012 11:20:47 +0200||Entry added Thu, 27 Dec 2012 11:20:47 +0200||Entry added Thu, 27 Dec 2012 11:20:47 +0200||Entry added Thu, 27 Dec 2012 11:20:47 +0200]]></detail>
2735
		</alias>
2736
		<alias>
2737
			<name>EISLAB_IL_DCs</name>
2738
			<address>10.165.200.100 10.165.200.101</address>
2739
			<descr/>
2740
			<type>host</type>
2741
			<detail><![CDATA[Entry added Thu, 31 Oct 2013 13:42:20 +0200||Entry added Thu, 31 Oct 2013 13:42:20 +0200]]></detail>
2742
		</alias>
2743
		<alias>
2744
			<name>Internet_Access_hosts</name>
2745
			<address>10.161.245.51 10.161.222.32 10.161.111.3 10.161.111.4 10.161.245.47 10.161.207.95 10.161.207.96 10.161.222.51 10.161.222.8 10.161.207.173 10.161.207.175 10.161.222.102 10.161.222.253 10.161.111.11 10.161.111.126 10.161.111.4 10.161.111.9 10.161.207.192 10.161.207.193 10.161.207.194 10.161.207.195 10.161.207.196 10.161.125.17 10.161.125.27 10.161.125.18 10.161.125.28 10.161.125.29 10.161.125.34 10.161.125.35 10.161.125.46 10.161.125.47 10.161.125.48 10.161.125.49 10.161.125.50 10.161.204.138 10.165.205.198 10.165.142.134 10.165.142.173 10.165.142.175 10.161.223.81 10.161.245.60 10.161.124.167</address>
2746
			<descr/>
2747
			<type>host</type>
2748
			<detail><![CDATA[Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||Entry added Fri, 01 Mar 2013 07:22:36 +0200||IICMBUIL2||Entry added Thu, 28 Mar 2013 13:10:32 +0200||Omer Shwartz||zztest||Entry added Sun, 06 Oct 2013 11:38:21 +0200||Entry added Wed, 04 Dec 2013 14:29:09 +0200||Entry added Wed, 18 Dec 2013 09:20:49 +0200||Lieberman, Ariel]]></detail>
2749
		</alias>
2750
		<alias>
2751
			<name>Internet_Access_Net</name>
2752
			<address>10.161.133.0/24 10.161.141.0/24 10.165.140.0/24 10.165.200.0/24 10.161.63.0/24 192.168.100.0/24 10.165.205.0/24 10.165.180.0/24 10.165.223.0/24</address>
2753
			<descr/>
2754
			<type>network</type>
2755
			<detail><![CDATA[Entry added Fri, 01 Mar 2013 07:08:36 +0200||Entry added Fri, 01 Mar 2013 07:08:36 +0200||Entry added Fri, 01 Mar 2013 07:26:00 +0200||Entry added Fri, 01 Mar 2013 07:26:00 +0200||Entry added Sun, 03 Mar 2013 10:03:16 +0200||Entry added Sun, 15 Sep 2013 12:11:13 +0300||Scan Servers||Entry added Mon, 11 Nov 2013 15:56:52 +0200||Entry added Wed, 25 Dec 2013 11:37:27 +0200]]></detail>
2756
		</alias>
2757
		<alias>
2758
			<name>McAfee_Servers</name>
2759
			<address>10.165.200.171 10.165.200.169 Move_Scan_Servers</address>
2760
			<descr/>
2761
			<type>host</type>
2762
			<detail><![CDATA[EPO||Scan Server VIP||Entry added Sun, 03 Nov 2013 13:35:48 +0200]]></detail>
2763
		</alias>
2764
		<alias>
2765
			<name>monitoring_server</name>
2766
			<address>10.165.200.84</address>
2767
			<descr/>
2768
			<type>host</type>
2769
			<detail><![CDATA[Entry added Sun, 12 May 2013 11:08:18 +0300]]></detail>
2770
		</alias>
2771
		<alias>
2772
			<name>Move_Scan_Servers</name>
2773
			<address>10.165.205.151 10.165.205.152 10.165.205.153 10.165.205.154 10.165.205.155 10.165.205.156 10.165.205.157 10.165.205.158 10.165.205.159 10.165.205.160</address>
2774
			<descr/>
2775
			<type>host</type>
2776
			<detail><![CDATA[Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300||Entry added Wed, 21 Aug 2013 10:52:04 +0300]]></detail>
2777
		</alias>
2778
		<alias>
2779
			<name>REC_2_DC_TCP</name>
2780
			<address>80 443 7001:7002</address>
2781
			<descr/>
2782
			<type>port</type>
2783
			<detail><![CDATA[HTTP||HTTPS||Entry added Wed, 20 Jun 2012 16:26:54 +0300]]></detail>
2784
		</alias>
2785
		<alias>
2786
			<name>Rec_2_Desk_TCP</name>
2787
			<address>4001 29500:29504 29510</address>
2788
			<descr/>
2789
			<type>port</type>
2790
			<detail><![CDATA[Entry added Thu, 14 Jun 2012 10:35:05 +0300||Entry added Thu, 14 Jun 2012 10:35:05 +0300||Entry added Thu, 14 Jun 2012 10:35:05 +0300]]></detail>
2791
		</alias>
2792
		<alias>
2793
			<name>Rec_2_Desk_UDP</name>
2794
			<address>8500:8503</address>
2795
			<descr/>
2796
			<type>port</type>
2797
			<detail><![CDATA[Entry added Thu, 14 Jun 2012 10:36:42 +0300]]></detail>
2798
		</alias>
2799
		<alias>
2800
			<name>Recorder_Net</name>
2801
			<address>10.165.241.0/24 10.165.243.0/24 10.165.246.0/24</address>
2802
			<descr/>
2803
			<type>network</type>
2804
			<detail><![CDATA[Site B||Site A||DataCenter]]></detail>
2805
		</alias>
2806
		<alias>
2807
			<name>WAS_LAB_FL0</name>
2808
			<address>10.161.0.0/16</address>
2809
			<descr/>
2810
			<type>network</type>
2811
			<detail><![CDATA[WAS-LAB-FL0]]></detail>
2812
		</alias>
2813
	</aliases>
2814
	<proxyarp/>
2815
	<cron>
2816
		<item>
2817
			<minute>1,31</minute>
2818
			<hour>0-5</hour>
2819
			<mday>*</mday>
2820
			<month>*</month>
2821
			<wday>*</wday>
2822
			<who>root</who>
2823
			<command>/usr/bin/nice -n20 adjkerntz -a</command>
2824
		</item>
2825
		<item>
2826
			<minute>1</minute>
2827
			<hour>3</hour>
2828
			<mday>1</mday>
2829
			<month>*</month>
2830
			<wday>*</wday>
2831
			<who>root</who>
2832
			<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
2833
		</item>
2834
		<item>
2835
			<minute>*/60</minute>
2836
			<hour>*</hour>
2837
			<mday>*</mday>
2838
			<month>*</month>
2839
			<wday>*</wday>
2840
			<who>root</who>
2841
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>
2842
		</item>
2843
		<item>
2844
			<minute>1</minute>
2845
			<hour>1</hour>
2846
			<mday>*</mday>
2847
			<month>*</month>
2848
			<wday>*</wday>
2849
			<who>root</who>
2850
			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
2851
		</item>
2852
		<item>
2853
			<minute>*/60</minute>
2854
			<hour>*</hour>
2855
			<mday>*</mday>
2856
			<month>*</month>
2857
			<wday>*</wday>
2858
			<who>root</who>
2859
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
2860
		</item>
2861
		<item>
2862
			<minute>30</minute>
2863
			<hour>12</hour>
2864
			<mday>*</mday>
2865
			<month>*</month>
2866
			<wday>*</wday>
2867
			<who>root</who>
2868
			<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
2869
		</item>
2870
	</cron>
2871
	<rrd>
2872
		<enable/>
2873
	</rrd>
2874
	<load_balancer>
2875
		<monitor_type>
2876
			<name>ICMP</name>
2877
			<type>icmp</type>
2878
			<descr><![CDATA[ICMP]]></descr>
2879
			<options/>
2880
		</monitor_type>
2881
		<monitor_type>
2882
			<name>TCP</name>
2883
			<type>tcp</type>
2884
			<descr><![CDATA[Generic TCP]]></descr>
2885
			<options/>
2886
		</monitor_type>
2887
		<monitor_type>
2888
			<name>HTTP</name>
2889
			<type>http</type>
2890
			<descr><![CDATA[Generic HTTP]]></descr>
2891
			<options>
2892
				<path>/</path>
2893
				<host/>
2894
				<code>200</code>
2895
			</options>
2896
		</monitor_type>
2897
		<monitor_type>
2898
			<name>HTTPS</name>
2899
			<type>https</type>
2900
			<descr><![CDATA[Generic HTTPS]]></descr>
2901
			<options>
2902
				<path>/</path>
2903
				<host/>
2904
				<code>200</code>
2905
			</options>
2906
		</monitor_type>
2907
		<monitor_type>
2908
			<name>SMTP</name>
2909
			<type>send</type>
2910
			<descr><![CDATA[Generic SMTP]]></descr>
2911
			<options>
2912
				<send/>
2913
				<expect>220 *</expect>
2914
			</options>
2915
		</monitor_type>
2916
		<lbpool>
2917
			<name>MCafee_ScanServe</name>
2918
			<mode>loadbalance</mode>
2919
			<descr/>
2920
			<port>9053</port>
2921
			<retry/>
2922
			<servers>10.165.205.156</servers>
2923
			<servers>10.165.205.157</servers>
2924
			<servers>10.165.205.158</servers>
2925
			<servers>10.165.205.159</servers>
2926
			<servers>10.165.205.160</servers>
2927
			<serversdisabled/>
2928
			<monitor>TCP</monitor>
2929
		</lbpool>
2930
		<virtual_server>
2931
			<name>Move_Server</name>
2932
			<descr/>
2933
			<poolname>MCafee_ScanServe</poolname>
2934
			<port>9053</port>
2935
			<ipaddr>10.165.200.169</ipaddr>
2936
			<mode>redirect_mode</mode>
2937
			<relay_protocol>tcp</relay_protocol>
2938
		</virtual_server>
2939
	</load_balancer>
2940
	<widgets>
2941
		<sequence>system_information-container:col1:show,captive_portal_status-container:col1:close,carp_status-container:col1:show,cpu_graphs-container:col1:close,gateways-container:col1:close,gmirror_status-container:col1:close,installed_packages-container:col1:close,interface_statistics-container:col1:show,interfaces-container:col2:show,ipsec-container:col2:close,load_balancer_status-container:col2:close,log-container:col2:close,picture-container:col2:close,rss-container:col2:close,services_status-container:col2:close,traffic_graphs-container:col2:show,dyn_dns_status-container:col2:none,openvpn-container:col2:none,smart_status-container:col2:none,thermal_sensors-container:col2:none,wake_on_lan-container:col2:none</sequence>
2942
	</widgets>
2943
	<revision>
2944
		<time>1390836752</time>
2945
		<description><![CDATA[admin@10.61.21.63: /system_advanced_network.php made unknown change]]></description>
2946
		<username>admin@10.61.21.63</username>
2947
	</revision>
2948
	<l7shaper>
2949
		<container/>
2950
	</l7shaper>
2951
	<dnshaper/>
2952
	<cert>
2953
		<refid>4fb89e8447e7f</refid>
2954
		<descr><![CDATA[webConfigurator default]]></descr>
2955
		<crt>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</crt>
2956
		<prv>R2VuZXJhdGluZyBSU0EgcHJpdmF0ZSBrZXksIDEwMjQgYml0IGxvbmcgbW9kdWx1cwouKysrKysrCi4uLi4uLi4uLi4uLi4uLi4uKysrKysrCmUgaXMgNjU1MzcgKDB4MTAwMDEpCi0tLS0tQkVHSU4gUlNBIFBSSVZBVEUgS0VZLS0tLS0KTUlJQ1hBSUJBQUtCZ1FDejFFREpwU0NIRTJPOS84c1VuZ3dtR24wN09lKzl6ZUl4SUpZV3FCSk5Va2c4QnUvYwpQa1ppOTRhb1oxUXhJWXdEdjdsaEUrVTFEVVVjdHpUbXErRXhoSDNCRk8valZxdkg3NGtyRm1vTVBRUTVrTXlUCkM0Zy9NdzF2MlBDUTVOMWs5dTF5RU93amlxdDRtc2VUbnc5WWJpZUZDZGJzSHRLSDNHRVozWXNkMXdJREFRQUIKQW9HQUlhTkxkeXluTi8wZGhEWHI0L0JvYjF3M0hyUUlyMlZxc1N2YVIyU3EvOEdyZDJjSXlSYnhEYVFsa1N5Ngo1L0hSZ2dZRUJDKzNpVVB4TUp6b2pWbUxadXBONkN5NmhtY1lwQVp6cTZLZCtTZWtXUzFUejJuU3ZYbDBVS1NwCnVBWEZsQWhRYnVDdEM2RHdCUWFFZVU3dlZHRVRNWWlGR1lUTW53eHRlSGZwVkxFQ1FRRG9aU3l0aEx4Vm43QzUKVHNwYk5TckRIckpvUlluaHZWVysxd3laTjl5VFNwdTZkZW56U29KcTE3UVpJSHpBZkFvVGhhSDZqcjRpeE52egpBbTlzeUc3NUFrRUF4aGc4VHMzaDlBUDhWWDdrVTlpRmp4VDZIN2NjN1FWZ2hjZDFDcGFzR2Y0QVk3SVZJajkrCjRJOXJhUFdCMTdFVC8rS3NTbU11RjFLN3lBZkJKeHlYVHdKQU5xTVN6ZmpYRG9wczBpUmtEdTJCRUQ2M1V5eUcKTGp5RlhFalMvWExVdVF4aGNJVW9hN3FvenRYSDBlQ0JjLysxbnNGY1E3d3JsNkVRMVNGTmNSWHVnUUpBSGhHMwp0YzZTcWRPaERlbEJCMmtxZk5tV1RoSWhsZWpuQ2VlSTRKNldhU3VoSzREd3JFNHZHQzh0QXJXaGkvZ1pMUkpmClRMdFpWN2o3UUJYTlAvNmJDUUpCQUpoeTBzelJ1SnN5emhVS1lkaFVDZG1hNnQrZTExV3Jjclc2WS9VWEhOYjYKbGNCVjhrdUdMZUphWWxKQUZYcEhlY1dDUXYzdGhJazl3Z3NWdXllQXQ0VT0KLS0tLS1FTkQgUlNBIFBSSVZBVEUgS0VZLS0tLS0K</prv>
2957
	</cert>
2958
	<gateways>
2959
		<gateway_item>
2960
			<interface>wan</interface>
2961
			<gateway>10.165.128.250</gateway>
2962
			<name>WANGW</name>
2963
			<weight/>
2964
			<interval/>
2965
			<descr/>
2966
			<defaultgw/>
2967
			<ipprotocol>inet</ipprotocol>
2968
		</gateway_item>
2969
	</gateways>
2970
	<dhcpdv6/>
2971
	<wizardtemp>
2972
		<system>
2973
			<hostname>WASLAB-FW1</hostname>
2974
			<domain>EISLAB-IL.INTRA</domain>
2975
		</system>
2976
		<wangateway>192.168.100.3</wangateway>
2977
	</wizardtemp>
2978
	<ppps/>
2979
	<shaper/>
2980
	<nat>
2981
		<ipsecpassthru>
2982
			<enable/>
2983
		</ipsecpassthru>
2984
		<advancedoutbound>
2985
			<rule>
2986
				<source>
2987
					<network>any</network>
2988
				</source>
2989
				<sourceport/>
2990
				<descr/>
2991
				<target/>
2992
				<targetip/>
2993
				<targetip_subnet>0</targetip_subnet>
2994
				<interface>lan</interface>
2995
				<poolopts/>
2996
				<destination>
2997
					<any/>
2998
				</destination>
2999
				<updated>
3000
					<time>1382520601</time>
3001
					<username>admin@10.61.21.63</username>
3002
				</updated>
3003
				<created>
3004
					<time>1382520601</time>
3005
					<username>admin@10.61.21.63</username>
3006
				</created>
3007
			</rule>
3008
			<rule>
3009
				<source>
3010
					<network>any</network>
3011
				</source>
3012
				<sourceport/>
3013
				<descr/>
3014
				<target>10.161.204.254</target>
3015
				<targetip/>
3016
				<targetip_subnet>0</targetip_subnet>
3017
				<interface>wan</interface>
3018
				<poolopts/>
3019
				<destination>
3020
					<address>10.200.50.14/32</address>
3021
				</destination>
3022
				<created>
3023
					<time>1381220375</time>
3024
					<username>admin@10.61.21.63</username>
3025
				</created>
3026
				<updated>
3027
					<time>1381220563</time>
3028
					<username>admin@10.61.21.63</username>
3029
				</updated>
3030
			</rule>
3031
			<rule>
3032
				<source>
3033
					<network>any</network>
3034
				</source>
3035
				<sourceport/>
3036
				<descr/>
3037
				<target/>
3038
				<targetip/>
3039
				<targetip_subnet>0</targetip_subnet>
3040
				<interface>wan</interface>
3041
				<poolopts/>
3042
				<destination>
3043
					<address>10.165.128.0/24</address>
3044
				</destination>
3045
			</rule>
3046
			<rule>
3047
				<source>
3048
					<network>any</network>
3049
				</source>
3050
				<sourceport/>
3051
				<descr><![CDATA[Auto created rule for MNG to WAN]]></descr>
3052
				<target/>
3053
				<targetip/>
3054
				<targetip_subnet/>
3055
				<interface>wan</interface>
3056
				<poolopts/>
3057
				<nonat/>
3058
				<destination>
3059
					<address>10.0.0.0/8</address>
3060
				</destination>
3061
			</rule>
3062
			<rule>
3063
				<source>
3064
					<network>127.0.0.0/8</network>
3065
				</source>
3066
				<dstport/>
3067
				<descr><![CDATA[Auto created rule for localhost to WAN]]></descr>
3068
				<target/>
3069
				<interface>wan</interface>
3070
				<destination>
3071
					<any/>
3072
				</destination>
3073
				<natport>1024:65535</natport>
3074
			</rule>
3075
			<rule>
3076
				<source>
3077
					<network>Internet_Access_Net</network>
3078
				</source>
3079
				<sourceport/>
3080
				<descr/>
3081
				<target/>
3082
				<targetip/>
3083
				<targetip_subnet>0</targetip_subnet>
3084
				<interface>wan</interface>
3085
				<poolopts/>
3086
				<destination>
3087
					<any/>
3088
				</destination>
3089
				<updated>
3090
					<time>1390461234</time>
3091
					<username>admin@10.61.21.63</username>
3092
				</updated>
3093
			</rule>
3094
			<rule>
3095
				<source>
3096
					<network>Internet_Access_hosts</network>
3097
				</source>
3098
				<sourceport/>
3099
				<descr/>
3100
				<target/>
3101
				<targetip/>
3102
				<targetip_subnet>0</targetip_subnet>
3103
				<interface>wan</interface>
3104
				<poolopts/>
3105
				<destination>
3106
					<any/>
3107
				</destination>
3108
				<updated>
3109
					<time>1387960338</time>
3110
					<username>admin@10.61.21.63</username>
3111
				</updated>
3112
			</rule>
3113
			<rule>
3114
				<source>
3115
					<network>any</network>
3116
				</source>
3117
				<sourceport/>
3118
				<descr/>
3119
				<target/>
3120
				<targetip/>
3121
				<targetip_subnet>0</targetip_subnet>
3122
				<interface>wan</interface>
3123
				<poolopts/>
3124
				<destination>
3125
					<any/>
3126
				</destination>
3127
				<dstport>3218</dstport>
3128
			</rule>
3129
			<rule>
3130
				<source>
3131
					<network>any</network>
3132
				</source>
3133
				<sourceport/>
3134
				<descr/>
3135
				<target/>
3136
				<targetip/>
3137
				<targetip_subnet/>
3138
				<interface>wan</interface>
3139
				<poolopts/>
3140
				<nonat/>
3141
				<destination>
3142
					<any/>
3143
				</destination>
3144
				<updated>
3145
					<time>1383220795</time>
3146
					<username>admin@10.61.21.63</username>
3147
				</updated>
3148
			</rule>
3149
			<enable/>
3150
		</advancedoutbound>
3151
	</nat>
3152
	<installedpackages>
3153
		<service/>
3154
	</installedpackages>
3155
	<laggs>
3156
		<lagg>
3157
			<members>ix0,ix1</members>
3158
			<descr><![CDATA[LAN]]></descr>
3159
			<laggif>lagg0</laggif>
3160
			<proto>lacp</proto>
3161
		</lagg>
3162
		<lagg>
3163
			<members>ix2,ix3</members>
3164
			<descr><![CDATA[WAN]]></descr>
3165
			<laggif>lagg1</laggif>
3166
			<proto>lacp</proto>
3167
		</lagg>
3168
	</laggs>
3169
	<vlans>
3170
		<vlan>
3171
			<if>lagg0</if>
3172
			<tag>640</tag>
3173
			<descr><![CDATA[165.240]]></descr>
3174
			<vlanif>lagg0_vlan640</vlanif>
3175
		</vlan>
3176
		<vlan>
3177
			<if>lagg0</if>
3178
			<tag>641</tag>
3179
			<descr><![CDATA[165.241]]></descr>
3180
			<vlanif>lagg0_vlan641</vlanif>
3181
		</vlan>
3182
		<vlan>
3183
			<if>lagg0</if>
3184
			<tag>642</tag>
3185
			<descr><![CDATA[165.242]]></descr>
3186
			<vlanif>lagg0_vlan642</vlanif>
3187
		</vlan>
3188
		<vlan>
3189
			<if>lagg0</if>
3190
			<tag>643</tag>
3191
			<descr><![CDATA[165.243]]></descr>
3192
			<vlanif>lagg0_vlan643</vlanif>
3193
		</vlan>
3194
		<vlan>
3195
			<if>lagg0</if>
3196
			<tag>644</tag>
3197
			<descr><![CDATA[165.244]]></descr>
3198
			<vlanif>lagg0_vlan644</vlanif>
3199
		</vlan>
3200
		<vlan>
3201
			<if>lagg0</if>
3202
			<tag>645</tag>
3203
			<descr><![CDATA[165.245]]></descr>
3204
			<vlanif>lagg0_vlan645</vlanif>
3205
		</vlan>
3206
		<vlan>
3207
			<if>lagg0</if>
3208
			<tag>646</tag>
3209
			<descr><![CDATA[165.246]]></descr>
3210
			<vlanif>lagg0_vlan646</vlanif>
3211
		</vlan>
3212
		<vlan>
3213
			<if>lagg0</if>
3214
			<tag>647</tag>
3215
			<descr><![CDATA[165.247]]></descr>
3216
			<vlanif>lagg0_vlan647</vlanif>
3217
		</vlan>
3218
		<vlan>
3219
			<if>lagg0</if>
3220
			<tag>600</tag>
3221
			<descr><![CDATA[165.200]]></descr>
3222
			<vlanif>lagg0_vlan600</vlanif>
3223
		</vlan>
3224
		<vlan>
3225
			<if>lagg0</if>
3226
			<tag>540</tag>
3227
			<descr><![CDATA[165.140]]></descr>
3228
			<vlanif>lagg0_vlan540</vlanif>
3229
		</vlan>
3230
		<vlan>
3231
			<if>lagg0</if>
3232
			<tag>541</tag>
3233
			<descr><![CDATA[165.141]]></descr>
3234
			<vlanif>lagg0_vlan541</vlanif>
3235
		</vlan>
3236
		<vlan>
3237
			<if>lagg0</if>
3238
			<tag>530</tag>
3239
			<descr><![CDATA[165.130]]></descr>
3240
			<vlanif>lagg0_vlan530</vlanif>
3241
		</vlan>
3242
		<vlan>
3243
			<if>lagg0</if>
3244
			<tag>623</tag>
3245
			<descr><![CDATA[165.223]]></descr>
3246
			<vlanif>lagg0_vlan623</vlanif>
3247
		</vlan>
3248
		<vlan>
3249
			<if>lagg0</if>
3250
			<tag>134</tag>
3251
			<descr><![CDATA[161.134]]></descr>
3252
			<vlanif>lagg0_vlan134</vlanif>
3253
		</vlan>
3254
		<vlan>
3255
			<if>lagg0</if>
3256
			<tag>135</tag>
3257
			<descr><![CDATA[161.135]]></descr>
3258
			<vlanif>lagg0_vlan135</vlanif>
3259
		</vlan>
3260
		<vlan>
3261
			<if>lagg0</if>
3262
			<tag>542</tag>
3263
			<descr><![CDATA[165.142]]></descr>
3264
			<vlanif>lagg0_vlan542</vlanif>
3265
		</vlan>
3266
		<vlan>
3267
			<if>lagg0</if>
3268
			<tag>60</tag>
3269
			<descr><![CDATA[Floor2]]></descr>
3270
			<vlanif>lagg0_vlan60</vlanif>
3271
		</vlan>
3272
		<vlan>
3273
			<if>lagg0</if>
3274
			<tag>20</tag>
3275
			<descr><![CDATA[OLD VLAN20]]></descr>
3276
			<vlanif>lagg0_vlan20</vlanif>
3277
		</vlan>
3278
		<vlan>
3279
			<if>lagg0</if>
3280
			<tag>543</tag>
3281
			<descr><![CDATA[165_143]]></descr>
3282
			<vlanif>lagg0_vlan543</vlanif>
3283
		</vlan>
3284
		<vlan>
3285
			<if>lagg0</if>
3286
			<tag>544</tag>
3287
			<descr><![CDATA[165_144]]></descr>
3288
			<vlanif>lagg0_vlan544</vlanif>
3289
		</vlan>
3290
		<vlan>
3291
			<if>lagg0</if>
3292
			<tag>545</tag>
3293
			<descr><![CDATA[165_145]]></descr>
3294
			<vlanif>lagg0_vlan545</vlanif>
3295
		</vlan>
3296
		<vlan>
3297
			<if>lagg0</if>
3298
			<tag>546</tag>
3299
			<descr><![CDATA[165_146]]></descr>
3300
			<vlanif>lagg0_vlan546</vlanif>
3301
		</vlan>
3302
		<vlan>
3303
			<if>lagg0</if>
3304
			<tag>529</tag>
3305
			<descr><![CDATA[ILO (Non Infra)]]></descr>
3306
			<vlanif>lagg0_vlan529</vlanif>
3307
		</vlan>
3308
		<vlan>
3309
			<if>lagg0</if>
3310
			<tag>580</tag>
3311
			<descr><![CDATA[DMZ]]></descr>
3312
			<vlanif>lagg0_vlan580</vlanif>
3313
		</vlan>
3314
		<vlan>
3315
			<if>lagg0</if>
3316
			<tag>605</tag>
3317
			<descr/>
3318
			<vlanif>lagg0_vlan605</vlanif>
3319
		</vlan>
3320
	</vlans>
3321
	<virtualip>
3322
		<vip>
3323
			<mode>ipalias</mode>
3324
			<interface>opt18</interface>
3325
			<descr/>
3326
			<type>single</type>
3327
			<subnet_bits>24</subnet_bits>
3328
			<subnet>10.161.124.252</subnet>
3329
		</vip>
3330
		<vip>
3331
			<mode>ipalias</mode>
3332
			<interface>opt18</interface>
3333
			<descr/>
3334
			<type>single</type>
3335
			<subnet_bits>24</subnet_bits>
3336
			<subnet>10.161.245.253</subnet>
3337
		</vip>
3338
		<vip>
3339
			<mode>ipalias</mode>
3340
			<interface>opt18</interface>
3341
			<descr/>
3342
			<type>single</type>
3343
			<subnet_bits>24</subnet_bits>
3344
			<subnet>10.161.223.253</subnet>
3345
		</vip>
3346
		<vip>
3347
			<mode>ipalias</mode>
3348
			<interface>opt18</interface>
3349
			<descr/>
3350
			<type>single</type>
3351
			<subnet_bits>24</subnet_bits>
3352
			<subnet>10.161.222.13</subnet>
3353
		</vip>
3354
		<vip>
3355
			<mode>ipalias</mode>
3356
			<interface>opt18</interface>
3357
			<descr/>
3358
			<type>single</type>
3359
			<subnet_bits>24</subnet_bits>
3360
			<subnet>10.161.207.13</subnet>
3361
		</vip>
3362
		<vip>
3363
			<mode>ipalias</mode>
3364
			<interface>opt18</interface>
3365
			<descr/>
3366
			<type>single</type>
3367
			<subnet_bits>24</subnet_bits>
3368
			<subnet>10.161.206.13</subnet>
3369
		</vip>
3370
		<vip>
3371
			<mode>ipalias</mode>
3372
			<interface>opt18</interface>
3373
			<descr/>
3374
			<type>single</type>
3375
			<subnet_bits>24</subnet_bits>
3376
			<subnet>10.161.205.13</subnet>
3377
		</vip>
3378
		<vip>
3379
			<mode>ipalias</mode>
3380
			<interface>opt18</interface>
3381
			<descr/>
3382
			<type>single</type>
3383
			<subnet_bits>24</subnet_bits>
3384
			<subnet>10.161.204.253</subnet>
3385
		</vip>
3386
		<vip>
3387
			<mode>ipalias</mode>
3388
			<interface>opt18</interface>
3389
			<descr/>
3390
			<type>single</type>
3391
			<subnet_bits>24</subnet_bits>
3392
			<subnet>10.161.203.253</subnet>
3393
		</vip>
3394
		<vip>
3395
			<mode>ipalias</mode>
3396
			<interface>opt18</interface>
3397
			<descr/>
3398
			<type>single</type>
3399
			<subnet_bits>24</subnet_bits>
3400
			<subnet>10.161.202.253</subnet>
3401
		</vip>
3402
		<vip>
3403
			<mode>ipalias</mode>
3404
			<interface>opt18</interface>
3405
			<descr/>
3406
			<type>single</type>
3407
			<subnet_bits>24</subnet_bits>
3408
			<subnet>10.161.201.13</subnet>
3409
		</vip>
3410
		<vip>
3411
			<mode>ipalias</mode>
3412
			<interface>opt18</interface>
3413
			<descr/>
3414
			<type>single</type>
3415
			<subnet_bits>24</subnet_bits>
3416
			<subnet>10.161.141.253</subnet>
3417
		</vip>
3418
		<vip>
3419
			<mode>ipalias</mode>
3420
			<interface>opt18</interface>
3421
			<descr/>
3422
			<type>single</type>
3423
			<subnet_bits>24</subnet_bits>
3424
			<subnet>10.161.135.253</subnet>
3425
		</vip>
3426
		<vip>
3427
			<mode>ipalias</mode>
3428
			<interface>opt18</interface>
3429
			<descr/>
3430
			<type>single</type>
3431
			<subnet_bits>24</subnet_bits>
3432
			<subnet>10.161.134.253</subnet>
3433
		</vip>
3434
		<vip>
3435
			<mode>ipalias</mode>
3436
			<interface>opt18</interface>
3437
			<descr/>
3438
			<type>single</type>
3439
			<subnet_bits>24</subnet_bits>
3440
			<subnet>10.161.133.252</subnet>
3441
		</vip>
3442
		<vip>
3443
			<mode>ipalias</mode>
3444
			<interface>opt18</interface>
3445
			<descr/>
3446
			<type>single</type>
3447
			<subnet_bits>24</subnet_bits>
3448
			<subnet>10.161.125.252</subnet>
3449
		</vip>
3450
		<vip>
3451
			<mode>ipalias</mode>
3452
			<interface>opt18</interface>
3453
			<descr/>
3454
			<type>single</type>
3455
			<subnet_bits>24</subnet_bits>
3456
			<subnet>10.161.111.253</subnet>
3457
		</vip>
3458
		<vip>
3459
			<mode>ipalias</mode>
3460
			<interface>opt13</interface>
3461
			<descr/>
3462
			<type>single</type>
3463
			<subnet_bits>24</subnet_bits>
3464
			<subnet>10.161.70.253</subnet>
3465
		</vip>
3466
		<vip>
3467
			<mode>ipalias</mode>
3468
			<interface>opt13</interface>
3469
			<descr/>
3470
			<type>single</type>
3471
			<subnet_bits>24</subnet_bits>
3472
			<subnet>10.161.64.253</subnet>
3473
		</vip>
3474
		<vip>
3475
			<mode>ipalias</mode>
3476
			<interface>opt13</interface>
3477
			<descr/>
3478
			<type>single</type>
3479
			<subnet_bits>24</subnet_bits>
3480
			<subnet>10.161.63.253</subnet>
3481
		</vip>
3482
		<vip>
3483
			<mode>ipalias</mode>
3484
			<interface>opt13</interface>
3485
			<descr/>
3486
			<type>single</type>
3487
			<subnet_bits>24</subnet_bits>
3488
			<subnet>10.161.62.253</subnet>
3489
		</vip>
3490
		<vip>
3491
			<mode>ipalias</mode>
3492
			<interface>opt13</interface>
3493
			<descr/>
3494
			<type>single</type>
3495
			<subnet_bits>24</subnet_bits>
3496
			<subnet>10.161.61.1</subnet>
3497
		</vip>
3498
	</virtualip>
3499
	<authserver/>
3500
	<dhcrelay/>
3501
	<dhcrelay6/>
3502
	<hasync>
3503
		<synchronizeusers>on</synchronizeusers>
3504
		<synchronizeauthservers>on</synchronizeauthservers>
3505
		<synchronizecerts>on</synchronizecerts>
3506
		<synchronizerules>on</synchronizerules>
3507
		<synchronizeschedules>on</synchronizeschedules>
3508
		<synchronizealiases>on</synchronizealiases>
3509
		<synchronizenat>on</synchronizenat>
3510
		<synchronizeipsec>on</synchronizeipsec>
3511
		<synchronizeopenvpn>on</synchronizeopenvpn>
3512
		<synchronizedhcpd>on</synchronizedhcpd>
3513
		<synchronizewol>on</synchronizewol>
3514
		<synchronizestaticroutes>on</synchronizestaticroutes>
3515
		<synchronizelb>on</synchronizelb>
3516
		<synchronizevirtualip>on</synchronizevirtualip>
3517
		<synchronizetrafficshaper>on</synchronizetrafficshaper>
3518
		<synchronizetrafficshaperlimiter>on</synchronizetrafficshaperlimiter>
3519
		<synchronizetrafficshaperlayer7>on</synchronizetrafficshaperlayer7>
3520
		<synchronizednsforwarder>on</synchronizednsforwarder>
3521
		<synchronizecaptiveportal>on</synchronizecaptiveportal>
3522
		<pfsyncpeerip>192.168.100.3</pfsyncpeerip>
3523
		<pfsyncinterface>lan</pfsyncinterface>
3524
		<synchronizetoip/>
3525
		<username>admin</username>
3526
		<password>ESXpumpkin1</password>
3527
		<pfsyncenabled>on</pfsyncenabled>
3528
	</hasync>
3529
	<notifications>
3530
		<growl>
3531
			<ipaddress/>
3532
			<password/>
3533
			<name>PHP-Growl</name>
3534
			<notification_name>pfSense growl alert</notification_name>
3535
		</growl>
3536
		<smtp>
3537
			<ipaddress/>
3538
			<port/>
3539
			<ssl>unchecked</ssl>
3540
			<notifyemailaddress/>
3541
			<username/>
3542
			<password/>
3543
			<fromaddress/>
3544
			<disable/>
3545
		</smtp>
3546
	</notifications>
3547
	<rrddata/>
3548
</pfsense>
(1-1/2)