pfSense

<?php

 * globals.inc

 * Copyright (c) 2013-2016 Electric Sheep Fencing

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

define('SEC_CLOSED', 0x04);

define('SEC_OPEN', 0x00);

define("IPV6", 6);

define("IPV4V6", 2);

define("ALIAS", 1);

define("IF_NAMESIZE", 15);	/* 16 minus the terminating NULL */

define('CPPREFIX', "cpzoneid_");

	"varetc_path" => "/var/etc",

	"vardb_path" => "/var/db",

	"varlog_path" => "/var/log",

	"etc_path" => "/etc",

	"tmp_path" => "/tmp",

	"conf_default_path" => "/conf.default",

	"cf_path" => "/cf",

	"cf_conf_path" => "/cf/conf",

	"www_path" => "/usr/local/www",

	"xml_rootobj" => "pfsense",

	"admin_group" => "admins",

	"captiveportal_element_path" => "/var/db/cpelements",

	"default_log_size" => 512000,

	"backuppath" => array(

		'captiveportal' => "/var/db/captiveportal*.db",

		'dhcpd' => "/var/dhcpd/var/db/dhcpd.leases",

		'dhcpdv6' => "/var/dhcpd/var/db/dhcpd6.leases",

		'voucher' => "/var/db/voucher_*.db"

	"booting" => false

/* TCP flags */

	$g["product_version_patch"] = trim(file_get_contents("/etc/version.patch"), " \n");

} else {

	$g["product_version_patch"] = "0";

}

$g['product_version_string'] = $g['product_version'];

if (is_numeric($g["product_version_patch"]) && $g["product_version_patch"] != "0") {

	$g['product_version_string'] .= "-p{$g['product_version_patch']}";

}

	$flavor_array = file("{$g['etc_path']}/default-config-flavor");

	$g['default-config-flavor'] = chop($flavor_array[0]);

} else {

	$g['default-config-flavor'] = '';

}

	"net.inet.tcp.blackhole" => "2",

	"net.inet.udp.blackhole" => "1",

	"net.inet.ip.random_id" => "1",

	"net.inet.tcp.drop_synfin" => "1",

	"net.inet.ip.redirect" => "1",

	"net.inet6.ip6.redirect" => "1",

	"net.inet6.ip6.prefer_tempaddr" => "0",

	"net.inet.tcp.recvspace" => "65228",

	"net.inet.tcp.sendspace" => "65228",

	"net.inet.tcp.delayed_ack" => "0",

	"net.inet.udp.maxdgram" => "57344",

	"net.link.bridge.pfil_onlyip" => "0",

	"net.link.bridge.pfil_member" => "1",

	"net.link.bridge.pfil_bridge" => "0",

	"net.link.tap.user_open" => "1",

	"net.inet.ip.intr_queue_maxlen" => "1000",

	"hw.syscons.kbd_reboot" => "0",

	"net.inet.tcp.log_debug" => "0",

	"net.inet.tcp.tso" => "1",

	"net.raw.recvspace" => 65536,

	"net.inet.raw.recvspace" => 131072,

	"kern.corefile" => "/root/%N.core" /* Write all core files to /root/ so they do not consume space on other slices */

if (($machine_type == 'arm') || ($machine_type == 'arm64')) {

	$sysctls['kern.shutdown.secure_halt'] = 1;

}

$g["ext_menu_path"] = "/usr/local/share/{$g['product_name']}/menu";

$g["version_cache_file"] = "{$g['varrun_path']}/{$g['product_name']}_version";

		if ($on_console == false || php_sapi_name() != 'fpm-fcgi') {

	}

	return false;

}

$factory_default_checkipservice = array(

	"enable" => true,

	"name" => 'Default',

	"url" => 'http://checkip.dyndns.org',

//	"username" => '',

//	"password" => '',

//	"verifysslpeer" => true,

	"descr" => 'Default Check IP Service'

);

/* pf tokens from FreeBSD source sbin/pfctl/parse.y (plus our custom entries at the end)*/

global $pf_reserved_keywords;

$pf_reserved_keywords = array(

	"pass", "block", "scrub", "return", "in", "os", "out", "log", "quick", "on", "from", "to", "flags", "returnrst",

	"returnicmp", "returnicmp6", "proto", "inet", "inet6", "all", "any", "icmptype", "icmp6type", "code", "keep",

	"modulate", "state", "port", "rdr", "nat", "binat", "arrow", "nodf", "minttl", "error", "allowopts", "fastroute",

	"filename", "routeto", "dupto", "replyto", "no", "label", "noroute", "urpffailed", "fragment", "user", "group",

	"maxmss", "maximum", "ttl", "tos", "drop", "table", "reassemble", "fragdrop", "fragcrop", "anchor", "natanchor",

	"rdranchor", "binatanchor", "set", "optimization", "timeout", "limit", "loginterface", "blockpolicy", "randomid",

	"requireorder", "synproxy", "fingerprints", "nosync", "debug", "skip", "hostid", "antispoof", "for", "include",

	"bitmask", "random", "sourcehash", "roundrobin", "staticport", "probability", "altq", "cbq", "codel", "priq",

	"hfsc", "fairq", "bandwidth", "tbrsize", "linkshare", "realtime", "upperlimit", "queue", "priority", "qlimit",

	"hogs", "buckets", "rtable", "target", "interval", "load", "ruleset_optimization", "prio", "stickyaddress",

	"maxsrcstates", "maxsrcnodes", "sourcetrack", "global", "rule", "maxsrcconn", "maxsrcconnrate", "overload",

	"flush", "sloppy", "tagged", "tag", "ifbound", "floating", "statepolicy", "statedefaults", "route", "settos",

	"divertto", "divertreply", "max", "min", "pptp", "pppoe", "L2TP", "OpenVPN", "IPsec");

$reserved_table_names = array(

	"bogons",

	"bogonsv6",

	"negate_networks",

	"snort2c",

	"sshguard",

	"tonatsubnets",

	"virusprot",

	"vpn_networks",

);

$vlanprio_values = array(

	"bk" => 0,

	"be" => 1,

	"ee" => 2,

	"ca" => 3,

	"vi" => 4,

	"vo" => 5,

	"ic" => 6,

	"nc" => 7

);

$vlanprio = array(

	"bk" => "Background (BK, 0)",

	"be" => "Best Effort (BE, 1)",

	"ee" => "Excellent Effort (EE, 2)",

	"ca" => "Critical Applications (CA, 3)",

	"vi" => "Video (VI, 4)",

	"vo" => "Voice (VO, 5)",

	"ic" => "Internetwork Control (IC, 6)",

	"nc" => "Network Control (NC, 7)"

);

$system_log_files = array(

	"system", "filter", "dhcpd", "vpn", "poes", "l2tps", "openvpn",

	"portalauth", "ipsec", "ppp", "wireless", "nginx", "ntpd", "gateways",

$system_log_non_syslog_files = array('dmesg.boot', 'utx.log', 'userlog');

$system_log_compression_types = array(

	'bzip2' => array(

			'flag' => 'J',

		),

	'gzip' => array(

			'flag' => 'Z',

		),

	'xz' => array(

			'flag' => 'X',

		),

	'zstd' => array(

			'flag' => 'Y',

		),

	'none' => array(

			'flag' => '',

		),

);

$ddnsdomainkeyalgorithms = array(

		'hmac-md5' => 'HMAC-MD5 (legacy default)',

		'hmac-sha1' => 'HMAC-SHA1',

		'hmac-sha224' => 'HMAC-SHA224',

		'hmac-sha256' => 'HMAC-SHA256 (current bind9 default)',

		'hmac-sha384' => 'HMAC-SHA384',

		'hmac-sha512' => 'HMAC-SHA512 (most secure)');

$ipsec_filtermodes = array(

	'if_ipsec' => 'Filter IPsec VTI and Transport on assigned interfaces, block all tunnel mode traffic'

global $ipsec_filter_sysctl;

$ipsec_filter_sysctl = array(

	'enc' => array(

		"net.inet.ipsec.filtertunnel"   => "0x0000",

		"net.inet6.ipsec6.filtertunnel" => "0x0000",

		"net.enc.out.ipsec_bpf_mask"    => "0x0001",

		"net.enc.out.ipsec_filter_mask" => "0x0001",

		"net.enc.in.ipsec_bpf_mask"     => "0x0002",

		"net.enc.in.ipsec_filter_mask"  => "0x0002"

	),

	'if_ipsec' => array(

		"net.inet.ipsec.filtertunnel"   => "0x0001",

		"net.inet6.ipsec6.filtertunnel" => "0x0001",

		"net.enc.out.ipsec_bpf_mask"    => "0x0000",

		"net.enc.out.ipsec_filter_mask" => "0x0000",

		"net.enc.in.ipsec_bpf_mask"     => "0x0000",

		"net.enc.in.ipsec_filter_mask"  => "0x0000"

	),

);

$vpn_and_ppp_ifs = array("l2tp", "pppoe", "enc0", "openvpn");

global $ssh_keys;

$ssh_keys = array(

	array('type' => 'rsa',     'suffix' => 'rsa_'),

	array('type' => 'ed25519', 'suffix' => 'ed25519_')

);

global $sshConfigDir;

$sshConfigDir = "/etc/ssh";

$lagg_hash_list = array(

	'l2,l3,l4' => 'Layer 2/3/4 (default)',

	'l2' => 'Layer 2 (MAC Address)',

	'l3' => 'Layer 3 (IP Address)',

	'l4' => 'Layer 4 (Port Number)',

	'l2,l3' => 'Layer 2/3 (MAC + IP)',

	'l3,l4' => 'Layer 3/4 (IP + Port)',

	'l2,l4' => 'Layer 2/4 (MAC + Port)'

);