root/cf/conf/config.xml @ 644d1f1c
| 1 |
<?xml version="1.0"?>
|
|---|---|
| 2 |
<!-- pfSense default system configuration -->
|
| 3 |
<pfsense>
|
| 4 |
<version>2.0</version> |
| 5 |
<lastchange></lastchange>
|
| 6 |
<theme>metallic</theme> |
| 7 |
<system>
|
| 8 |
<optimization>normal</optimization> |
| 9 |
<schedulertype>priq</schedulertype> |
| 10 |
<hostname>pfSense</hostname> |
| 11 |
<domain>local</domain> |
| 12 |
<dnsserver></dnsserver>
|
| 13 |
<dnsallowoverride/>
|
| 14 |
<username>admin</username> |
| 15 |
<password>$1$dSJImFph$GvZ7.1UbuWu.Yb8etC0re.</password> |
| 16 |
<timezone>Etc/UTC</timezone> |
| 17 |
<time-update-interval>300</time-update-interval> |
| 18 |
<timeservers>pool.ntp.org</timeservers> |
| 19 |
<webgui>
|
| 20 |
<protocol>http</protocol> |
| 21 |
<!--
|
| 22 |
<port></port>
|
| 23 |
<certificate></certificate>
|
| 24 |
<private-key></private-key>
|
| 25 |
<noassigninterfaces/>
|
| 26 |
<expanddiags/>
|
| 27 |
<noantilockout></noantilockout>
|
| 28 |
-->
|
| 29 |
</webgui>
|
| 30 |
<!-- <disableconsolemenu/> -->
|
| 31 |
<!-- <disablefirmwarecheck/> -->
|
| 32 |
<!-- <shellcmd></shellcmd> -->
|
| 33 |
<!-- <earlyshellcmd></earlyshellcmd> -->
|
| 34 |
<!-- <harddiskstandby></harddiskstandby> -->
|
| 35 |
</system>
|
| 36 |
<interfaces>
|
| 37 |
<lan>
|
| 38 |
<if>lnc0</if> |
| 39 |
<ipaddr>192.168.1.1</ipaddr> |
| 40 |
<subnet>24</subnet> |
| 41 |
<media></media>
|
| 42 |
<mediaopt></mediaopt>
|
| 43 |
<bandwidth>100</bandwidth> |
| 44 |
<bandwidthtype>Mb</bandwidthtype> |
| 45 |
<!--
|
| 46 |
<wireless>
|
| 47 |
*see below (opt[n])*
|
| 48 |
</wireless>
|
| 49 |
-->
|
| 50 |
</lan>
|
| 51 |
<wan>
|
| 52 |
<if>lnc1</if> |
| 53 |
<mtu></mtu>
|
| 54 |
<ipaddr>dhcp</ipaddr> |
| 55 |
<!-- *or* ipv4-address *or* 'pppoe' *or* 'pptp' *or* 'bigpond' -->
|
| 56 |
<subnet></subnet>
|
| 57 |
<gateway></gateway>
|
| 58 |
<blockpriv/>
|
| 59 |
<disableftpproxy/>
|
| 60 |
<dhcphostname></dhcphostname>
|
| 61 |
<media></media>
|
| 62 |
<mediaopt></mediaopt>
|
| 63 |
<bandwidth>100</bandwidth> |
| 64 |
<bandwidthtype>Mb</bandwidthtype> |
| 65 |
<!--
|
| 66 |
<wireless>
|
| 67 |
*see below (opt[n])*
|
| 68 |
</wireless>
|
| 69 |
-->
|
| 70 |
</wan>
|
| 71 |
<!--
|
| 72 |
<opt[n]>
|
| 73 |
<enable/>
|
| 74 |
<descr></descr>
|
| 75 |
<if></if>
|
| 76 |
<ipaddr></ipaddr>
|
| 77 |
<subnet></subnet>
|
| 78 |
<media></media>
|
| 79 |
<mediaopt></mediaopt>
|
| 80 |
<bridge>lan|wan|opt[n]</bridge>
|
| 81 |
<wireless>
|
| 82 |
<mode>hostap *or* bss *or* ibss</mode>
|
| 83 |
<ssid></ssid>
|
| 84 |
<channel></channel>
|
| 85 |
<wep>
|
| 86 |
<enable/>
|
| 87 |
<key>
|
| 88 |
<txkey/>
|
| 89 |
<value></value>
|
| 90 |
</key>
|
| 91 |
</wep>
|
| 92 |
</wireless>
|
| 93 |
</opt[n]>
|
| 94 |
-->
|
| 95 |
</interfaces>
|
| 96 |
<!--
|
| 97 |
<vlans>
|
| 98 |
<vlan>
|
| 99 |
<tag></tag>
|
| 100 |
<if></if>
|
| 101 |
<descr></descr>
|
| 102 |
</vlan>
|
| 103 |
</vlans>
|
| 104 |
-->
|
| 105 |
<staticroutes>
|
| 106 |
<!--
|
| 107 |
<route>
|
| 108 |
<interface>lan|opt[n]|pptp</interface>
|
| 109 |
<network>xxx.xxx.xxx.xxx/xx</network>
|
| 110 |
<gateway>xxx.xxx.xxx.xxx</gateway>
|
| 111 |
<descr></descr>
|
| 112 |
</route>
|
| 113 |
-->
|
| 114 |
</staticroutes>
|
| 115 |
<pppoe>
|
| 116 |
<username></username>
|
| 117 |
<password></password>
|
| 118 |
<provider></provider>
|
| 119 |
<!--
|
| 120 |
<ondemand/>
|
| 121 |
<timeout></timeout>
|
| 122 |
-->
|
| 123 |
</pppoe>
|
| 124 |
<pptp>
|
| 125 |
<username></username>
|
| 126 |
<password></password>
|
| 127 |
<local></local>
|
| 128 |
<subnet></subnet>
|
| 129 |
<remote></remote>
|
| 130 |
<!--
|
| 131 |
<ondemand/>
|
| 132 |
<timeout></timeout>
|
| 133 |
-->
|
| 134 |
</pptp>
|
| 135 |
<bigpond>
|
| 136 |
<username></username>
|
| 137 |
<password></password>
|
| 138 |
<authserver></authserver>
|
| 139 |
<authdomain></authdomain>
|
| 140 |
<minheartbeatinterval></minheartbeatinterval>
|
| 141 |
</bigpond>
|
| 142 |
<dyndns>
|
| 143 |
<!-- <enable/> -->
|
| 144 |
<type>dyndns</type> |
| 145 |
<username></username>
|
| 146 |
<password></password>
|
| 147 |
<host></host>
|
| 148 |
<mx></mx>
|
| 149 |
<!-- <wildcard/> -->
|
| 150 |
</dyndns>
|
| 151 |
<dhcpd>
|
| 152 |
<lan>
|
| 153 |
<enable/>
|
| 154 |
<range>
|
| 155 |
<from>192.168.1.100</from> |
| 156 |
<to>192.168.1.199</to> |
| 157 |
</range>
|
| 158 |
<!--
|
| 159 |
<winsserver>xxx.xxx.xxx.xxx</winsserver>
|
| 160 |
<defaultleasetime></defaultleasetime>
|
| 161 |
<maxleasetime></maxleasetime>
|
| 162 |
<gateway>xxx.xxx.xxx.xxx</gateway>
|
| 163 |
<domain></domain>
|
| 164 |
<dnsserver></dnsserver>
|
| 165 |
<next-server></next-server>
|
| 166 |
<filename></filename>
|
| 167 |
-->
|
| 168 |
</lan>
|
| 169 |
<!--
|
| 170 |
<opt[n]>
|
| 171 |
...
|
| 172 |
</opt[n]>
|
| 173 |
-->
|
| 174 |
<!--
|
| 175 |
<staticmap>
|
| 176 |
<mac>xx:xx:xx:xx:xx:xx</mac>
|
| 177 |
<ipaddr>xxx.xxx.xxx.xxx</ipaddr>
|
| 178 |
<descr></descr>
|
| 179 |
</staticmap>
|
| 180 |
-->
|
| 181 |
</dhcpd>
|
| 182 |
<pptpd>
|
| 183 |
<mode><!-- off *or* server *or* redir --></mode> |
| 184 |
<redir></redir>
|
| 185 |
<localip></localip>
|
| 186 |
<remoteip></remoteip>
|
| 187 |
<!-- <accounting/> -->
|
| 188 |
<!--
|
| 189 |
<user>
|
| 190 |
<name></name>
|
| 191 |
<password></password>
|
| 192 |
</user>
|
| 193 |
-->
|
| 194 |
</pptpd>
|
| 195 |
<ovpn>
|
| 196 |
<!--
|
| 197 |
<server>
|
| 198 |
<enable/>
|
| 199 |
<ca_cert></ca_cert>
|
| 200 |
<srv_cert></srv_cert>
|
| 201 |
<srv_key></srv_key>
|
| 202 |
<dh_param></dh_param>
|
| 203 |
<verb></verb>
|
| 204 |
<tun_iface></tun_iface>
|
| 205 |
<port></port>
|
| 206 |
<bind_iface></bind_iface>
|
| 207 |
<cli2cli/>
|
| 208 |
<maxcli></maxcli>
|
| 209 |
<prefix></prefix>
|
| 210 |
<ipblock></ipblock>
|
| 211 |
<crypto></crypto>
|
| 212 |
<dupcn/>
|
| 213 |
<psh_options>
|
| 214 |
<redir></redir>
|
| 215 |
<redir_loc></redir_loc>
|
| 216 |
<rte_delay></rte_delay>
|
| 217 |
<ping></ping>
|
| 218 |
<pingrst></pingrst>
|
| 219 |
<pingexit></pingexit>
|
| 220 |
<inact></inact>
|
| 221 |
</psh_options>
|
| 222 |
</server>
|
| 223 |
<client>
|
| 224 |
<tunnel></tunnel>
|
| 225 |
<ca_cert></ca_cert>
|
| 226 |
<cli_cert></cli_cert>
|
| 227 |
<cli_key></cli_key>
|
| 228 |
<type></type>
|
| 229 |
<tunnel>
|
| 230 |
<if></if>
|
| 231 |
<proto></proto>
|
| 232 |
<cport></cport>
|
| 233 |
<saddr></saddr>
|
| 234 |
<sport></sport>
|
| 235 |
<crypto></crypto>
|
| 236 |
</tunnel>
|
| 237 |
</client>
|
| 238 |
-->
|
| 239 |
</ovpn>
|
| 240 |
<dnsmasq>
|
| 241 |
<enable/>
|
| 242 |
<!--
|
| 243 |
<hosts>
|
| 244 |
<host></host>
|
| 245 |
<domain></domain>
|
| 246 |
<ip></ip>
|
| 247 |
<descr></descr>
|
| 248 |
</hosts>
|
| 249 |
-->
|
| 250 |
</dnsmasq>
|
| 251 |
<snmpd>
|
| 252 |
<!-- <enable/> -->
|
| 253 |
<syslocation></syslocation>
|
| 254 |
<syscontact></syscontact>
|
| 255 |
<rocommunity>public</rocommunity> |
| 256 |
</snmpd>
|
| 257 |
<diag>
|
| 258 |
<ipv6nat>
|
| 259 |
<!-- <enable/> -->
|
| 260 |
<ipaddr></ipaddr>
|
| 261 |
</ipv6nat>
|
| 262 |
</diag>
|
| 263 |
<bridge>
|
| 264 |
<!-- <filteringbridge/> -->
|
| 265 |
</bridge>
|
| 266 |
<syslog>
|
| 267 |
<!--
|
| 268 |
<reverse/>
|
| 269 |
<enable/>
|
| 270 |
<remoteserver>xxx.xxx.xxx.xxx</remoteserver>
|
| 271 |
<filter/>
|
| 272 |
<dhcp/>
|
| 273 |
<system/>
|
| 274 |
<nologdefaultblock/>
|
| 275 |
-->
|
| 276 |
</syslog>
|
| 277 |
<!--
|
| 278 |
<captiveportal>
|
| 279 |
<enable/>
|
| 280 |
<interface>lan|opt[n]</interface>
|
| 281 |
<idletimeout>minutes</idletimeout>
|
| 282 |
<timeout>minutes</timeout>
|
| 283 |
<page>
|
| 284 |
<htmltext></htmltext>
|
| 285 |
<errtext></errtext>
|
| 286 |
</page>
|
| 287 |
<httpslogin/>
|
| 288 |
<httpsname></httpsname>
|
| 289 |
<certificate></certificate>
|
| 290 |
<private-key></private-key>
|
| 291 |
<redirurl></redirurl>
|
| 292 |
<radiusip></radiusip>
|
| 293 |
<radiusport></radiusport>
|
| 294 |
<radiuskey></radiuskey>
|
| 295 |
<nomacfilter/>
|
| 296 |
</captiveportal>
|
| 297 |
-->
|
| 298 |
<nat>
|
| 299 |
<ipsecpassthru>
|
| 300 |
<enable/>
|
| 301 |
</ipsecpassthru>
|
| 302 |
<!--
|
| 303 |
<rule>
|
| 304 |
<interface></interface>
|
| 305 |
<external-address></external-address>
|
| 306 |
<protocol></protocol>
|
| 307 |
<external-port></external-port>
|
| 308 |
<target></target>
|
| 309 |
<local-port></local-port>
|
| 310 |
<descr></descr>
|
| 311 |
</rule>
|
| 312 |
-->
|
| 313 |
<!--
|
| 314 |
<onetoone>
|
| 315 |
<interface></interface>
|
| 316 |
<external>xxx.xxx.xxx.xxx</external>
|
| 317 |
<internal>xxx.xxx.xxx.xxx</internal>
|
| 318 |
<subnet></subnet>
|
| 319 |
<descr></descr>
|
| 320 |
</onetoone>
|
| 321 |
-->
|
| 322 |
<!--
|
| 323 |
<advancedoutbound>
|
| 324 |
<enable/>
|
| 325 |
<rule>
|
| 326 |
<interface></interface>
|
| 327 |
<source>
|
| 328 |
<network>xxx.xxx.xxx.xxx/xx</network>
|
| 329 |
</source>
|
| 330 |
<destination>
|
| 331 |
<not/>
|
| 332 |
<any/>
|
| 333 |
*or*
|
| 334 |
<network>xxx.xxx.xxx.xxx/xx</network>
|
| 335 |
</destination>
|
| 336 |
<target>xxx.xxx.xxx.xxx</target>
|
| 337 |
<descr></descr>
|
| 338 |
</rule>
|
| 339 |
</advancedoutbound>
|
| 340 |
-->
|
| 341 |
<!--
|
| 342 |
<servernat>
|
| 343 |
<ipaddr></ipaddr>
|
| 344 |
<descr></descr>
|
| 345 |
</servernat>
|
| 346 |
-->
|
| 347 |
</nat>
|
| 348 |
<filter>
|
| 349 |
<!-- <tcpidletimeout></tcpidletimeout> -->
|
| 350 |
<rule>
|
| 351 |
<type>pass</type> |
| 352 |
<descr>Default LAN -> any</descr> |
| 353 |
<interface>lan</interface> |
| 354 |
<source>
|
| 355 |
<network>lan</network> |
| 356 |
</source>
|
| 357 |
<destination>
|
| 358 |
<any/>
|
| 359 |
</destination>
|
| 360 |
</rule>
|
| 361 |
<!-- rule syntax:
|
| 362 |
<rule>
|
| 363 |
<disabled/>
|
| 364 |
<type>pass|block|reject</type>
|
| 365 |
<descr>...</descr>
|
| 366 |
<interface>lan|opt[n]|wan|pptp</interface>
|
| 367 |
<protocol>tcp|udp|tcp/udp|...</protocol>
|
| 368 |
<icmptype></icmptype>
|
| 369 |
<source>
|
| 370 |
<not/>
|
| 371 |
|
| 372 |
<address>xxx.xxx.xxx.xxx(/xx) or alias</address>
|
| 373 |
*or*
|
| 374 |
<network>lan|opt[n]|pptp</network>
|
| 375 |
*or*
|
| 376 |
<any/>
|
| 377 |
|
| 378 |
<port>a[-b]</port>
|
| 379 |
</source>
|
| 380 |
<destination>
|
| 381 |
*same as for source*
|
| 382 |
</destination>
|
| 383 |
<frags/>
|
| 384 |
<log/>
|
| 385 |
</rule>
|
| 386 |
-->
|
| 387 |
</filter>
|
| 388 |
<shaper>
|
| 389 |
<!-- <enable/> -->
|
| 390 |
<!-- rule syntax:
|
| 391 |
<rule>
|
| 392 |
<disabled/>
|
| 393 |
<descr></descr>
|
| 394 |
|
| 395 |
<targetpipe>number (zero based)</targetpipe>
|
| 396 |
*or*
|
| 397 |
<targetqueue>number (zero based)</targetqueue>
|
| 398 |
|
| 399 |
<interface>lan|wan|opt[n]|pptp</interface>
|
| 400 |
<protocol>tcp|udp</protocol>
|
| 401 |
<direction>in|out</direction>
|
| 402 |
<source>
|
| 403 |
<not/>
|
| 404 |
|
| 405 |
<address>xxx.xxx.xxx.xxx(/xx)</address>
|
| 406 |
*or*
|
| 407 |
<network>lan|opt[n]|pptp</network>
|
| 408 |
*or*
|
| 409 |
<any/>
|
| 410 |
|
| 411 |
<port>a[-b]</port>
|
| 412 |
</source>
|
| 413 |
<destination>
|
| 414 |
*same as for source*
|
| 415 |
</destination>
|
| 416 |
|
| 417 |
<iplen>from[-to]</iplen>
|
| 418 |
<iptos>(!)lowdelay,throughput,reliability,mincost,congestion</iptos>
|
| 419 |
<tcpflags>(!)fin,syn,rst,psh,ack,urg</tcpflags>
|
| 420 |
</rule>
|
| 421 |
<pipe>
|
| 422 |
<descr></descr>
|
| 423 |
<bandwidth></bandwidth>
|
| 424 |
<delay></delay>
|
| 425 |
<mask>source|destination</mask>
|
| 426 |
</pipe>
|
| 427 |
<queue>
|
| 428 |
<descr></descr>
|
| 429 |
<targetpipe>number (zero based)</targetpipe>
|
| 430 |
<weight></weight>
|
| 431 |
<mask>source|destination</mask>
|
| 432 |
</queue>
|
| 433 |
-->
|
| 434 |
</shaper>
|
| 435 |
<ipsec>
|
| 436 |
<preferredoldsa/>
|
| 437 |
<!-- <enable/> -->
|
| 438 |
<!-- syntax:
|
| 439 |
<tunnel>
|
| 440 |
<disabled/>
|
| 441 |
<auto/>
|
| 442 |
<descr></descr>
|
| 443 |
<interface>lan|wan|opt[n]</interface>
|
| 444 |
<local-subnet>
|
| 445 |
<address>xxx.xxx.xxx.xxx(/xx)</address>
|
| 446 |
*or*
|
| 447 |
<network>lan|opt[n]</network>
|
| 448 |
</local-subnet>
|
| 449 |
<remote-subnet>xxx.xxx.xxx.xxx/xx</remote-subnet>
|
| 450 |
<remote-gateway></remote-gateway>
|
| 451 |
<p1>
|
| 452 |
<mode></mode>
|
| 453 |
<myident>
|
| 454 |
<myaddress/>
|
| 455 |
*or*
|
| 456 |
<address>xxx.xxx.xxx.xxx</address>
|
| 457 |
*or*
|
| 458 |
<fqdn>the.fq.dn</fqdn>
|
| 459 |
</myident>
|
| 460 |
<encryption-algorithm></encryption-algorithm>
|
| 461 |
<hash-algorithm></hash-algorithm>
|
| 462 |
<dhgroup></dhgroup>
|
| 463 |
<lifetime></lifetime>
|
| 464 |
<pre-shared-key></pre-shared-key>
|
| 465 |
</p1>
|
| 466 |
<p2>
|
| 467 |
<protocol></protocol>
|
| 468 |
<encryption-algorithm-option></encryption-algorithm-option>
|
| 469 |
<hash-algorithm-option></hash-algorithm-option>
|
| 470 |
<pfsgroup></pfsgroup>
|
| 471 |
<lifetime></lifetime>
|
| 472 |
</p2>
|
| 473 |
</tunnel>
|
| 474 |
<mobileclients>
|
| 475 |
<enable/>
|
| 476 |
<p1>
|
| 477 |
<mode></mode>
|
| 478 |
<myident>
|
| 479 |
<myaddress/>
|
| 480 |
*or*
|
| 481 |
<address>xxx.xxx.xxx.xxx</address>
|
| 482 |
*or*
|
| 483 |
<fqdn>the.fq.dn</fqdn>
|
| 484 |
</myident>
|
| 485 |
<encryption-algorithm></encryption-algorithm>
|
| 486 |
<hash-algorithm></hash-algorithm>
|
| 487 |
<dhgroup></dhgroup>
|
| 488 |
<lifetime></lifetime>
|
| 489 |
</p1>
|
| 490 |
<p2>
|
| 491 |
<protocol></protocol>
|
| 492 |
<encryption-algorithm-option></encryption-algorithm-option>
|
| 493 |
<hash-algorithm-option></hash-algorithm-option>
|
| 494 |
<pfsgroup></pfsgroup>
|
| 495 |
<lifetime></lifetime>
|
| 496 |
</p2>
|
| 497 |
</mobileclients>
|
| 498 |
<mobilekey>
|
| 499 |
<ident></ident>
|
| 500 |
<pre-shared-key></pre-shared-key>
|
| 501 |
</mobilekey>
|
| 502 |
-->
|
| 503 |
</ipsec>
|
| 504 |
<aliases>
|
| 505 |
<!--
|
| 506 |
<alias>
|
| 507 |
<name></name>
|
| 508 |
<address>xxx.xxx.xxx.xxx(/xx)</address>
|
| 509 |
<descr></descr>
|
| 510 |
</alias>
|
| 511 |
-->
|
| 512 |
</aliases>
|
| 513 |
<proxyarp>
|
| 514 |
<!--
|
| 515 |
<proxyarpnet>
|
| 516 |
<network>xxx.xxx.xxx.xxx/xx</network>
|
| 517 |
*or*
|
| 518 |
<range>
|
| 519 |
<from>xxx.xxx.xxx.xxx</from>
|
| 520 |
<to>xxx.xxx.xxx.xxx</to>
|
| 521 |
</range>
|
| 522 |
</proxyarpnet>
|
| 523 |
-->
|
| 524 |
</proxyarp>
|
| 525 |
<wol>
|
| 526 |
<!--
|
| 527 |
<wolentry>
|
| 528 |
<interface>lan|opt[n]</interface>
|
| 529 |
<mac>xx:xx:xx:xx:xx:xx</mac>
|
| 530 |
<descr></descr>
|
| 531 |
</wolentry>
|
| 532 |
-->
|
| 533 |
</wol>
|
| 534 |
<installedpackages>
|
| 535 |
</installedpackages>
|
| 536 |
</pfsense>
|