pfSense

<?xml version="1.0"?>

<pfsense>

	<version>15.4</version>

	<lastchange/>

	<system>

		<optimization>normal</optimization>

		<hostname>pfSense</hostname>

		<domain>localdomain</domain>

		<dnsserver/>

		<dnsallowoverride/>

		<group>

			<name>all</name>

			<description><![CDATA[All Users]]></description>

			<scope>system</scope>

			<gid>1998</gid>

			<member>0</member>

		</group>

		<group>

			<name>admins</name>

			<description><![CDATA[System Administrators]]></description>

			<scope>system</scope>

			<gid>1999</gid>

			<member>0</member>

			<priv>page-all</priv>

		</group>

		<user>

			<name>admin</name>

			<descr><![CDATA[System Administrator]]></descr>

			<scope>system</scope>

			<groupname>admins</groupname>

			<bcrypt-hash>$2b$10$13u6qwCOwODv34GyCMgdWub6oQF3RX0rG7c3d3X4JvzuEmAXLYDd2</bcrypt-hash>

			<uid>0</uid>

			<priv>user-shell-access</priv>

		</user>

		<nextuid>2000</nextuid>

		<nextgid>2000</nextgid>

		<timeservers>0.pfsense.pool.ntp.org</timeservers>

		<webgui>

			<protocol>https</protocol>

			<loginautocomplete/>

		</webgui>

		<disablenatreflection>yes</disablenatreflection>

		<disablesegmentationoffloading/>

		<disablelargereceiveoffloading/>

		<ipv6allow/>

		<powerd_ac_mode>hadp</powerd_ac_mode>

		<powerd_battery_mode>hadp</powerd_battery_mode>

		<powerd_normal_mode>hadp</powerd_normal_mode>

		<bogons>

			<interval>monthly</interval>

		</bogons>

	</system>

	<interfaces>

		<wan>

			<enable/>

			<if>em0</if>

			<mtu/>

			<ipaddr>dhcp</ipaddr>

			<ipaddrv6>dhcp6</ipaddrv6>

			<subnet/>

			<gateway/>

			<blockpriv/>

			<blockbogons/>

			<dhcphostname/>

			<media/>

			<mediaopt/>

			<dhcp6-duid/>

			<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>

		</wan>

		<lan>

			<enable/>

			<if>em1</if>

			<ipaddr>192.168.1.1</ipaddr>

			<subnet>24</subnet>

			<ipaddrv6>track6</ipaddrv6>

			<subnetv6>64</subnetv6>

			<media/>

			<mediaopt/>

			<track6-interface>wan</track6-interface>

			<track6-prefix-id>0</track6-prefix-id>

		</lan>

	</interfaces>

	<staticroutes/>

	<dhcpd>

		<lan>

			<enable/>

			<range>

				<from>192.168.1.100</from>

				<to>192.168.1.199</to>

			</range>

		</lan>

	</dhcpd>

	<dhcpdv6>

		<lan>

			<enable/>

			<range>

				<from>::1000</from>

				<to>::2000</to>

			</range>

			<ramode>assist</ramode>

			<rapriority>medium</rapriority>

		</lan>

	</dhcpdv6>

	<snmpd>

		<syslocation/>

		<syscontact/>

		<rocommunity>public</rocommunity>

	</snmpd>

	<diag>

		<ipv6nat>

			<ipaddr/>

		</ipv6nat>

	</diag>

	<syslog/>

	<nat>

		<outbound>

			<mode>automatic</mode>

		</outbound>

	</nat>

	<filter>

		<rule>

			<type>pass</type>

			<ipprotocol>inet</ipprotocol>

			<descr><![CDATA[Default allow LAN to any rule]]></descr>

			<interface>lan</interface>

			<tracker>0100000101</tracker>

			<source>

				<network>lan</network>

			</source>

			<destination>

				<any/>

			</destination>

		</rule>

		<rule>

			<type>pass</type>

			<ipprotocol>inet6</ipprotocol>

			<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>

			<interface>lan</interface>

			<tracker>0100000102</tracker>

			<source>

				<network>lan</network>

			</source>

			<destination>

				<any/>

			</destination>

		</rule>

	</filter>

	<shaper/>

	<ipsec/>

	<aliases/>

	<proxyarp/>

	<cron>

		<item>

			<minute>1,31</minute>

			<hour>0-5</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 adjkerntz -a</command>

		</item>

		<item>

			<minute>1</minute>

			<hour>3</hour>

			<mday>1</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>

		</item>

		<item>

			<minute>*/60</minute>

			<hour>*</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout</command>

		</item>

		<item>

			<minute>*/60</minute>

			<hour>*</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout</command>

		</item>

		<item>

			<minute>1</minute>

			<hour>1</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>

		</item>

		<item>

			<minute>*/60</minute>

			<hour>*</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>

		</item>

		<item>

			<minute>30</minute>

			<hour>12</hour>

			<mday>*</mday>

			<month>*</month>

			<wday>*</wday>

			<who>root</who>

			<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>

		</item>

	</cron>

	<wol/>

	<rrd>

		<enable/>

	</rrd>

	<load_balancer>

		<monitor_type>

			<name>ICMP</name>

			<type>icmp</type>

			<descr><![CDATA[ICMP]]></descr>

			<options/>

		</monitor_type>

		<monitor_type>

			<name>TCP</name>

			<type>tcp</type>

			<descr><![CDATA[Generic TCP]]></descr>

			<options/>

		</monitor_type>

		<monitor_type>

			<name>HTTP</name>

			<type>http</type>

			<descr><![CDATA[Generic HTTP]]></descr>

			<options>

				<path>/</path>

				<host/>

				<code>200</code>

			</options>

		</monitor_type>

		<monitor_type>

			<name>HTTPS</name>

			<type>https</type>

			<descr><![CDATA[Generic HTTPS]]></descr>

			<options>

				<path>/</path>

				<host/>

				<code>200</code>

			</options>

		</monitor_type>

		<monitor_type>

			<name>SMTP</name>

			<type>send</type>

			<descr><![CDATA[Generic SMTP]]></descr>

			<options>

				<send/>

				<expect>220 *</expect>

			</options>

		</monitor_type>

	</load_balancer>

	<widgets>

		<sequence>system_information:col1:show,interfaces:col2:show</sequence>

	</widgets>

	<openvpn/>

	<dnshaper/>

	<unbound>

		<enable/>

		<dnssec/>

		<active_interface/>

		<outgoing_interface/>

		<custom_options/>

		<hideidentity/>

		<hideversion/>

		<dnssecstripped/>

	</unbound>

</pfsense>