<?xml version="1.0"?>
<opnsense>
  <theme>rebellion</theme>
  <sysctl>
    <item>
      <descr>Disable the pf ftp proxy handler.</descr>
      <tunable>debug.pfftpproxy</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Increase UFS read-ahead speeds to match the state of hard drives and NCQ.</descr>
      <tunable>vfs.read_max</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Set the ephemeral port range to be lower.</descr>
      <tunable>net.inet.ip.portrange.first</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Drop packets to closed TCP ports without returning a RST</descr>
      <tunable>net.inet.tcp.blackhole</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Do not send ICMP port unreachable messages for closed UDP ports</descr>
      <tunable>net.inet.udp.blackhole</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Randomize the ID field in IP packets (default is 0: sequential IP IDs)</descr>
      <tunable>net.inet.ip.random_id</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>
        Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
        It can also be used to probe for information about your internal networks. These functions come enabled
        as part of the standard FreeBSD core system.
      </descr>
      <tunable>net.inet.ip.sourceroute</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>
        Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
        It can also be used to probe for information about your internal networks. These functions come enabled
        as part of the standard FreeBSD core system.
      </descr>
      <tunable>net.inet.ip.accept_sourceroute</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>
        Redirect attacks are the purposeful mass-issuing of ICMP type 5 packets. In a normal network, redirects
        to the end stations should not be required. This option enables the NIC to drop all inbound ICMP redirect
        packets without returning a response.
      </descr>
      <tunable>net.inet.icmp.drop_redirect</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>
        This option turns off the logging of redirect packets because there is no limit and this could fill
        up your logs consuming your whole hard drive.
      </descr>
      <tunable>net.inet.icmp.log_redirect</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</descr>
      <tunable>net.inet.tcp.drop_synfin</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Enable sending IPv4 redirects</descr>
      <tunable>net.inet.ip.redirect</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Enable sending IPv6 redirects</descr>
      <tunable>net.inet6.ip6.redirect</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Enable privacy settings for IPv6 (RFC 4941)</descr>
      <tunable>net.inet6.ip6.use_tempaddr</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Prefer privacy addresses and use them over the normal addresses</descr>
      <tunable>net.inet6.ip6.prefer_tempaddr</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Generate SYN cookies for outbound SYN-ACK packets</descr>
      <tunable>net.inet.tcp.syncookies</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Maximum incoming/outgoing TCP datagram size (receive)</descr>
      <tunable>net.inet.tcp.recvspace</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Maximum incoming/outgoing TCP datagram size (send)</descr>
      <tunable>net.inet.tcp.sendspace</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Do not delay ACK to try and piggyback it onto a data packet</descr>
      <tunable>net.inet.tcp.delayed_ack</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Maximum outgoing UDP datagram size</descr>
      <tunable>net.inet.udp.maxdgram</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Handling of non-IP packets which are not passed to pfil (see if_bridge(4))</descr>
      <tunable>net.link.bridge.pfil_onlyip</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Set to 1 to additionally filter on the physical interface for locally destined packets</descr>
      <tunable>net.link.bridge.pfil_local_phys</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Set to 0 to disable filtering on the incoming and outgoing member interfaces.</descr>
      <tunable>net.link.bridge.pfil_member</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Set to 1 to enable filtering on the bridge interface</descr>
      <tunable>net.link.bridge.pfil_bridge</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Allow unprivileged access to tap(4) device nodes</descr>
      <tunable>net.link.tap.user_open</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())</descr>
      <tunable>kern.randompid</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Maximum size of the IP input queue</descr>
      <tunable>net.inet.ip.intr_queue_maxlen</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Disable CTRL+ALT+Delete reboot from keyboard.</descr>
      <tunable>hw.syscons.kbd_reboot</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Enable TCP extended debugging</descr>
      <tunable>net.inet.tcp.log_debug</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Set ICMP Limits</descr>
      <tunable>net.inet.icmp.icmplim</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>TCP Offload Engine</descr>
      <tunable>net.inet.tcp.tso</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>UDP Checksums</descr>
      <tunable>net.inet.udp.checksum</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Maximum socket buffer size</descr>
      <tunable>kern.ipc.maxsockbuf</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Page Table Isolation (Meltdown mitigation, requires reboot.)</descr>
      <tunable>vm.pmap.pti</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Disable Indirect Branch Restricted Speculation (Spectre V2 mitigation)</descr>
      <tunable>hw.ibrs_disable</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Hide processes running as other groups</descr>
      <tunable>security.bsd.see_other_gids</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Hide processes running as other users</descr>
      <tunable>security.bsd.see_other_uids</tunable>
      <value>default</value>
    </item>
    <item>
      <descr>Enable/disable sending of ICMP redirects in response to IP packets for which a better,
        and for the sender directly reachable, route and next hop is known.
      </descr>
      <tunable>net.inet.ip.redirect</tunable>
      <value>0</value>
    </item>
    <item>
      <descr>Enable/disable dropping of ICMP Redirect packets</descr>
      <tunable>net.inet.icmp.drop_redirect</tunable>
      <value>1</value>
    </item>
  </sysctl>
  <system>
    <optimization>normal</optimization>
    <hostname>OPNsense</hostname>
    <domain>home</domain>
    <dnsallowoverride>1</dnsallowoverride>
    <group>
      <name>admins</name>
      <description>System Administrators</description>
      <scope>system</scope>
      <gid>1999</gid>
      <member>0</member>
      <priv>page-all</priv>
    </group>
    <user>
      <name>root</name>
      <descr>System Administrator</descr>
      <scope>system</scope>
      <groupname>admins</groupname>
      <password>$2y$10$6LHP5G6VeDaSOctVWeQW9uo3pfgANCcvmfThws6BZT8P4lTjlHvHi</password>
      <uid>0</uid>
    </user>
    <nextuid>2000</nextuid>
    <nextgid>2000</nextgid>
    <timezone>Europe/Paris</timezone>
    <timeservers>0.opnsense.pool.ntp.org 1.opnsense.pool.ntp.org 2.opnsense.pool.ntp.org 3.opnsense.pool.ntp.org</timeservers>
    <webgui>
      <protocol>https</protocol>
      <ssl-certref>5d24bbe5aadd5</ssl-certref>
    </webgui>
    <disablenatreflection>yes</disablenatreflection>
    <usevirtualterminal>1</usevirtualterminal>
    <disableconsolemenu/>
    <disablevlanhwfilter>2</disablevlanhwfilter>
    <disablechecksumoffloading>1</disablechecksumoffloading>
    <disablesegmentationoffloading>1</disablesegmentationoffloading>
    <disablelargereceiveoffloading>1</disablelargereceiveoffloading>
    <ipv6allow>1</ipv6allow>
    <powerd_ac_mode>hadp</powerd_ac_mode>
    <powerd_battery_mode>hadp</powerd_battery_mode>
    <powerd_normal_mode>hadp</powerd_normal_mode>
    <bogons>
      <interval>monthly</interval>
    </bogons>
    <kill_states>1</kill_states>
    <backupcount>60</backupcount>
    <crypto_hardware>aesni</crypto_hardware>
    <pf_share_forward>1</pf_share_forward>
    <lb_use_sticky>1</lb_use_sticky>
    <ssh>
      <group>admins</group>
    </ssh>
    <backup>
      <nextcloud version="1.0.0">
        <enabled>0</enabled>
        <url/>
        <user/>
        <password/>
        <password_encryption/>
        <backupdir>OPNsense-Backup</backupdir>
      </nextcloud>
    </backup>
    <language>en_US</language>
    <dnsserver>1.1.1.1</dnsserver>
    <dnsserver>9.9.9.9</dnsserver>
    <dns1gw>none</dns1gw>
    <dns2gw>none</dns2gw>
    <dns3gw>none</dns3gw>
    <dns4gw>none</dns4gw>
    <dns5gw>none</dns5gw>
    <dns6gw>none</dns6gw>
    <dns7gw>none</dns7gw>
    <dns8gw>none</dns8gw>
    <rulesetoptimization>basic</rulesetoptimization>
    <maximumstates/>
    <maximumfrags/>
    <aliasesresolveinterval/>
    <maximumtableentries/>
    <firmware>
      <mirror>https://opnsense-mirror.hiho.ch</mirror>
      <plugins>os-theme-rebellion</plugins>
    </firmware>
    <thermal_hardware>coretemp</thermal_hardware>
  </system>
  <interfaces>
    <wan>
      <if>igb0_vlan832</if>
      <descr>WAN</descr>
      <enable>1</enable>
      <spoofmac/>
      <blockpriv>1</blockpriv>
      <blockbogons>1</blockbogons>
      <ipaddr>dhcp</ipaddr>
      <dhcphostname/>
      <alias-address/>
      <alias-subnet>32</alias-subnet>
      <dhcprejectfrom/>
      <adv_dhcp_pt_timeout>60</adv_dhcp_pt_timeout>
      <adv_dhcp_pt_retry>15</adv_dhcp_pt_retry>
      <adv_dhcp_pt_select_timeout>0</adv_dhcp_pt_select_timeout>
      <adv_dhcp_pt_reboot/>
      <adv_dhcp_pt_backoff_cutoff/>
      <adv_dhcp_pt_initial_interval>1</adv_dhcp_pt_initial_interval>
      <adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>
      <adv_dhcp_send_options>dhcp-class-identifier &#x201C;sagem&#x201D;, user-class "+FSVDSL_livebox.Internet.softathome.Livebox4", option-90 00:00:00:00:00:00:00:00:00:00:00:1a:09:00:00:05:58:01:03:41:01:0D:XX:3c:12:31:32:33:34:35:36:37:38:39:30:31:32:33:34:35:36:03:13:41:72:3e:22:ac:ef:16:76:f8:33:6c:b4:21:59:e2:a8:ba</adv_dhcp_send_options>
      <adv_dhcp_request_options>subnet-mask, broadcast-address, dhcp-lease-time, dhcp-renewal-time, dhcp-rebinding-time, domain-search, routers, domain-name-servers, option-90</adv_dhcp_request_options>
      <adv_dhcp_required_options/>
      <adv_dhcp_option_modifiers>vlan-parent "igb0", vlan-id 832, vlan-pcp 6</adv_dhcp_option_modifiers>
      <adv_dhcp_config_advanced>advanced</adv_dhcp_config_advanced>
      <adv_dhcp_config_file_override/>
      <adv_dhcp_config_file_override_path/>
      <ipaddrv6>dhcp6</ipaddrv6>
      <dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
      <dhcp6sendsolicit>1</dhcp6sendsolicit>
      <dhcp6vlanprio>6</dhcp6vlanprio>
      <adv_dhcp6_interface_statement_send_options>ia-pd 0, raw-option 6 00:0b:00:11:00:17:00:18, raw-option 15 00:2b:46:53:56:44:53:4c:5f:6c:69:76:65:62:6f:78:2e:49:6e:74:65:72:6e:65:74:2e:73:6f:66:74:61:74:68:6f:6d:65:2e:6c:69:76:65:62:6f:78:33, raw-option 16 00:00:04:0e:00:05:73:61:67:65:6d, raw-option 11 00:00:00:00:00:00:00:00:00:00:00:1a:09:00:00:05:58:01:03:41:01:0D:XX:3c:12:31:32:33:34:35:36:37:38:39:30:31:32:33:34:35:36:03:13:41:72:3e:22:ac:ef:16:76:f8:33:6c:b4:21:59:e2:a8:ba</adv_dhcp6_interface_statement_send_options>
      <adv_dhcp6_interface_statement_request_options/>
      <adv_dhcp6_interface_statement_information_only_enable/>
      <adv_dhcp6_interface_statement_script/>
      <adv_dhcp6_id_assoc_statement_address_enable/>
      <adv_dhcp6_id_assoc_statement_address/>
      <adv_dhcp6_id_assoc_statement_address_id/>
      <adv_dhcp6_id_assoc_statement_address_pltime/>
      <adv_dhcp6_id_assoc_statement_address_vltime/>
      <adv_dhcp6_id_assoc_statement_prefix_enable>on</adv_dhcp6_id_assoc_statement_prefix_enable>
      <adv_dhcp6_id_assoc_statement_prefix/>
      <adv_dhcp6_id_assoc_statement_prefix_id>0</adv_dhcp6_id_assoc_statement_prefix_id>
      <adv_dhcp6_id_assoc_statement_prefix_pltime/>
      <adv_dhcp6_id_assoc_statement_prefix_vltime/>
      <adv_dhcp6_prefix_interface_statement_sla_len>8</adv_dhcp6_prefix_interface_statement_sla_len>
      <adv_dhcp6_authentication_statement_authname/>
      <adv_dhcp6_authentication_statement_protocol/>
      <adv_dhcp6_authentication_statement_algorithm/>
      <adv_dhcp6_authentication_statement_rdm/>
      <adv_dhcp6_key_info_statement_keyname/>
      <adv_dhcp6_key_info_statement_realm/>
      <adv_dhcp6_key_info_statement_keyid/>
      <adv_dhcp6_key_info_statement_secret/>
      <adv_dhcp6_key_info_statement_expire/>
      <adv_dhcp6_config_advanced>advanced</adv_dhcp6_config_advanced>
      <adv_dhcp6_config_file_override/>
      <adv_dhcp6_config_file_override_path/>
    </wan>
    <lan>
      <if>igb1</if>
      <descr>LAN</descr>
      <enable>1</enable>
      <spoofmac/>
      <ipaddr>192.168.100.254</ipaddr>
      <subnet>24</subnet>
      <ipaddrv6>track6</ipaddrv6>
      <track6-interface>wan</track6-interface>
      <track6-prefix-id>0</track6-prefix-id>
    </lan>
    <opt1>
      <if>igb2_vlan832</if>
      <descr>Livebox</descr>
      <enable>1</enable>
      <spoofmac/>
      <ipaddr>192.168.1.254</ipaddr>
      <subnet>24</subnet>
    </opt1>
    <opt2>
      <if>igb3</if>
      <descr>Backup</descr>
      <enable>1</enable>
      <spoofmac/>
      <ipaddr>192.168.3.254</ipaddr>
      <subnet>24</subnet>
    </opt2>
  </interfaces>
  <dhcpd>
    <lan>
      <enable>1</enable>
      <ddnsdomainalgorithm>hmac-md5</ddnsdomainalgorithm>
      <numberoptions>
        <item>
          <number>90</number>
          <type>string</type>
          <value>00:00:00:00:00:00:00:00:00:00:00:64:68:63:70:6c:69:76:65:62:6f:78:66:72:32:35:30</value>
        </item>
        <item>
          <number>120</number>
          <type>string</type>
          <value>73:62:63:74:33:67:2e:42:4f:44:2e:61:63:63:65:73:73:2e:6f:72:61:6e:67:65:2d:6d:75:6c:74:69:6d:65:64:69:61:2e:6e:65:74</value>
        </item>
        <item>
          <number>125</number>
          <type>string</type>
          <value>00:00:05:58:0c:01:0a:00:00:00:00:00:ff:ff:ff:ff:ff</value>
        </item>
      </numberoptions>
      <range>
        <from>192.168.100.100</from>
        <to>192.168.100.199</to>
      </range>
      <winsserver/>
      <dnsserver/>
      <ntpserver>192.168.100.254</ntpserver>
      <staticmap>
        <mac>1c:1b:0d:6d:62:4e</mac>
        <ipaddr>192.168.100.20</ipaddr>
        <hostname>PC-FRANCKY</hostname>
        <descr>PC Bureau Franck</descr>
        <arp_table_static_entry>1</arp_table_static_entry>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
      <staticmap>
        <mac>e4:a7:a0:f4:2f:6d</mac>
        <ipaddr>192.168.100.25</ipaddr>
        <hostname>PC-FRANCKY-WIFI</hostname>
        <descr>PC Francky Wifi</descr>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
      <staticmap>
        <mac>00:11:32:82:73:b2</mac>
        <cid>NAS</cid>
        <ipaddr>192.168.100.30</ipaddr>
        <hostname>NAS_DS918</hostname>
        <descr>Synology DS918+</descr>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
      <staticmap>
        <mac>00:04:4b:a4:33:71</mac>
        <cid>Nvidia_Shield</cid>
        <ipaddr>192.168.100.40</ipaddr>
        <hostname>Nvidia_Shield</hostname>
        <descr>Box Android Nvidia Shield</descr>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
      <staticmap>
        <mac>28:18:78:6e:46:c8</mac>
        <cid>Xbox One</cid>
        <ipaddr>192.168.100.50</ipaddr>
        <hostname>Xbox_One</hostname>
        <descr>Console Microsoft Xbox One</descr>
        <gateway>192.168.100.254</gateway>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
      <staticmap>
        <mac>a4:ee:57:74:90:7c</mac>
        <cid>EPSON74907C</cid>
        <ipaddr>192.168.100.90</ipaddr>
        <hostname>EPSON74907C</hostname>
        <descr>Imprimante Epson</descr>
        <gateway>192.168.100.254</gateway>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
    </lan>
    <opt1>
      <enable>1</enable>
      <defaultleasetime>86400</defaultleasetime>
      <gateway>192.168.1.254</gateway>
      <domain>orange.fr</domain>
      <domainsearchlist>BOD.access.orange-multimedia.net</domainsearchlist>
      <ddnsdomainalgorithm>hmac-md5</ddnsdomainalgorithm>
      <numberoptions>
        <item>
          <number>90</number>
          <type>string</type>
          <value>00:00:00:00:00:00:00:00:00:00:00:64:68:63:70:6c:69:76:65:62:6f:78:66:72:32:35:30</value>
        </item>
        <item>
          <number>120</number>
          <type>string</type>
          <value>73:62:63:74:33:67:2e:42:4f:44:2e:61:63:63:65:73:73:2e:6f:72:61:6e:67:65:2d:6d:75:6c:74:69:6d:65:64:69:61:2e:6e:65:74</value>
        </item>
        <item>
          <number>125</number>
          <type>string</type>
          <value>00:00:05:58:0c:01:0a:00:00:00:00:00:ff:ff:ff:ff:ff</value>
        </item>
      </numberoptions>
      <range>
        <from>192.168.1.100</from>
        <to>192.168.1.199</to>
      </range>
      <winsserver/>
      <dnsserver>80.10.246.132</dnsserver>
      <dnsserver>81.253.149.2</dnsserver>
      <ntpserver>192.168.100.254</ntpserver>
      <staticmap>
        <mac>d8:a7:56:a1:48:1a</mac>
        <cid>Livebox</cid>
        <ipaddr>192.168.1.1</ipaddr>
        <hostname>Livebox</hostname>
        <descr>Livebox Orange</descr>
        <gateway>192.168.1.254</gateway>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
    </opt1>
    <opt2>
      <gateway>192.168.3.1</gateway>
      <ddnsdomainalgorithm>hmac-md5</ddnsdomainalgorithm>
      <numberoptions>
        <item/>
      </numberoptions>
      <range>
        <from>192.168.3.100</from>
        <to>192.168.3.199</to>
      </range>
      <winsserver/>
      <dnsserver/>
      <ntpserver/>
      <staticmap>
        <mac>00:90:a9:ed:5b:94</mac>
        <cid>MyCloud</cid>
        <ipaddr>192.168.3.20</ipaddr>
        <hostname>WDMyCloud</hostname>
        <descr>NAS Backup</descr>
        <gateway>192.168.3.1</gateway>
        <winsserver/>
        <dnsserver/>
        <ntpserver/>
      </staticmap>
    </opt2>
  </dhcpd>
  <unbound>
    <enable>1</enable>
    <custom_options/>
    <regdhcpstatic>1</regdhcpstatic>
    <domainoverrides/>
  </unbound>
  <snmpd>
    <syslocation/>
    <syscontact/>
    <rocommunity>public</rocommunity>
  </snmpd>
  <syslog>
    <reverse/>
  </syslog>
  <nat>
    <outbound>
      <mode>hybrid</mode>
      <rule/>
    </outbound>
    <rule>
      <protocol>tcp</protocol>
      <interface>wan</interface>
      <ipprotocol>inet</ipprotocol>
      <descr>Plex port</descr>
      <tag/>
      <tagged/>
      <poolopts/>
      <associated-rule-id/>
      <target>192.168.100.30</target>
      <local-port>32400</local-port>
      <source>
        <any>1</any>
      </source>
      <destination>
        <address>90.120.65.160/24</address>
        <port>32400</port>
      </destination>
      <updated>
        <username>root@192.168.100.20</username>
        <time>1562803731.7357</time>
        <description>/firewall_nat_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.20</username>
        <time>1562800730.794</time>
        <description>/firewall_nat_edit.php made changes</description>
      </created>
    </rule>
  </nat>
  <filter>
    <rule>
      <type>pass</type>
      <interface>wan</interface>
      <ipprotocol>inet46</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Traffic WAN vers LAN / Livebox</descr>
      <source>
        <network>lan</network>
      </source>
      <destination>
        <any>1</any>
      </destination>
      <updated>
        <username>root@192.168.100.25</username>
        <time>1564029880.8561</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.20</username>
        <time>1562773733.7066</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet46</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Default allow LAN to any rule</descr>
      <source>
        <any>1</any>
      </source>
      <destination>
        <any>1</any>
      </destination>
      <updated>
        <username>root@192.168.100.104</username>
        <time>1563921189.1071</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
    </rule>
    <rule>
      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet6</ipprotocol>
      <statetype>keep state</statetype>
      <source>
        <network>lan</network>
      </source>
      <destination>
        <any>1</any>
      </destination>
      <updated>
        <username>root@192.168.100.25</username>
        <time>1564002995.4466</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.25</username>
        <time>1564002995.4466</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>block</type>
      <interface>opt1</interface>
      <ipprotocol>inet46</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Block from Livebox to LAN</descr>
      <source>
        <network>opt1</network>
      </source>
      <destination>
        <network>lan</network>
      </destination>
      <updated>
        <username>root@192.168.100.20</username>
        <time>1562867889.0573</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.20</username>
        <time>1562784980.5615</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>opt1</interface>
      <ipprotocol>inet46</ipprotocol>
      <statetype>keep state</statetype>
      <source>
        <any>1</any>
      </source>
      <destination>
        <any>1</any>
      </destination>
      <updated>
        <username>root@192.168.100.20</username>
        <time>1562867863.2395</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.20</username>
        <time>1562867863.2395</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>block</type>
      <interface>opt2</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <source>
        <network>opt2</network>
      </source>
      <destination>
        <network>lan</network>
      </destination>
      <updated>
        <username>root@192.168.100.104</username>
        <time>1563920798.5572</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.104</username>
        <time>1563920798.5572</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>block</type>
      <interface>opt2</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <source>
        <network>opt2</network>
      </source>
      <destination>
        <network>wan</network>
      </destination>
      <updated>
        <username>root@192.168.100.104</username>
        <time>1563920835.6346</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.104</username>
        <time>1563920821.5884</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>block</type>
      <interface>opt2</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <gateway>Livebox_GWv4</gateway>
      <source>
        <network>opt2</network>
      </source>
      <destination>
        <any>1</any>
      </destination>
      <updated>
        <username>root@192.168.100.104</username>
        <time>1563920865.3659</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@192.168.100.104</username>
        <time>1563920865.3659</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
  </filter>
  <rrd>
    <enable/>
  </rrd>
  <load_balancer>
    <monitor_type>
      <name>ICMP</name>
      <type>icmp</type>
      <descr>ICMP</descr>
      <options/>
    </monitor_type>
    <monitor_type>
      <name>TCP</name>
      <type>tcp</type>
      <descr>Generic TCP</descr>
      <options/>
    </monitor_type>
    <monitor_type>
      <name>HTTP</name>
      <type>http</type>
      <descr>Generic HTTP</descr>
      <options>
        <path>/</path>
        <host/>
        <code>200</code>
      </options>
    </monitor_type>
    <monitor_type>
      <name>HTTPS</name>
      <type>https</type>
      <descr>Generic HTTPS</descr>
      <options>
        <path>/</path>
        <host/>
        <code>200</code>
      </options>
    </monitor_type>
    <monitor_type>
      <name>SMTP</name>
      <type>send</type>
      <descr>Generic SMTP</descr>
      <options>
        <send/>
        <expect>220 *</expect>
      </options>
    </monitor_type>
  </load_balancer>
  <ntpd>
    <prefer>0.opnsense.pool.ntp.org</prefer>
    <interface>wan</interface>
  </ntpd>
  <widgets>
    <sequence>system_information-container:00000000-col3:show,thermal_sensors-container:00000001-col3:show,services_status-container:00000002-col4:show,gateways-container:00000003-col4:show,interface_list-container:00000004-col4:show</sequence>
    <column_count>2</column_count>
  </widgets>
  <revision>
    <username>root@192.168.100.25</username>
    <time>1564029880.8753</time>
    <description>/firewall_rules_edit.php made changes</description>
  </revision>
  <OPNsense>
    <Firewall>
      <Alias version="1.0.0">
        <aliases/>
      </Alias>
    </Firewall>
    <captiveportal version="1.0.0">
      <zones/>
      <templates/>
    </captiveportal>
    <cron version="1.0.1">
      <jobs/>
    </cron>
    <Netflow version="1.0.0">
      <capture>
        <interfaces/>
        <egress_only>wan</egress_only>
        <version>v9</version>
        <targets/>
      </capture>
      <collect>
        <enable>0</enable>
      </collect>
    </Netflow>
    <OpenVPNExport version="0.0.1">
      <servers/>
    </OpenVPNExport>
    <proxy version="1.0.3">
      <general>
        <enabled>0</enabled>
        <icpPort/>
        <logging>
          <enable>
            <accessLog>1</accessLog>
            <storeLog>1</storeLog>
          </enable>
          <ignoreLogACL/>
          <target/>
        </logging>
        <alternateDNSservers/>
        <dnsV4First>0</dnsV4First>
        <forwardedForHandling>on</forwardedForHandling>
        <uriWhitespaceHandling>strip</uriWhitespaceHandling>
        <useViaHeader>1</useViaHeader>
        <suppressVersion>0</suppressVersion>
        <VisibleEmail>admin@localhost.local</VisibleEmail>
        <VisibleHostname/>
        <cache>
          <local>
            <enabled>0</enabled>
            <directory>/var/squid/cache</directory>
            <cache_mem>256</cache_mem>
            <maximum_object_size/>
            <size>100</size>
            <l1>16</l1>
            <l2>256</l2>
            <cache_linux_packages>0</cache_linux_packages>
            <cache_windows_updates>0</cache_windows_updates>
          </local>
        </cache>
        <traffic>
          <enabled>0</enabled>
          <maxDownloadSize>2048</maxDownloadSize>
          <maxUploadSize>1024</maxUploadSize>
          <OverallBandwidthTrotteling>1024</OverallBandwidthTrotteling>
          <perHostTrotteling>256</perHostTrotteling>
        </traffic>
        <parentproxy>
          <enabled>0</enabled>
          <host/>
          <enableauth>0</enableauth>
          <user>username</user>
          <password>password</password>
          <port/>
          <localdomains/>
          <localips/>
        </parentproxy>
      </general>
      <forward>
        <interfaces>lan</interfaces>
        <port>3128</port>
        <sslbumpport>3129</sslbumpport>
        <sslbump>0</sslbump>
        <sslurlonly>0</sslurlonly>
        <sslcertificate/>
        <sslnobumpsites/>
        <ssl_crtd_storage_max_size>4</ssl_crtd_storage_max_size>
        <sslcrtd_children>5</sslcrtd_children>
        <snmp_enable>0</snmp_enable>
        <snmp_port>3401</snmp_port>
        <snmp_password>public</snmp_password>
        <ftpInterfaces/>
        <ftpPort>2121</ftpPort>
        <ftpTransparentMode>0</ftpTransparentMode>
        <addACLforInterfaceSubnets>1</addACLforInterfaceSubnets>
        <transparentMode>0</transparentMode>
        <acl>
          <allowedSubnets/>
          <unrestricted/>
          <bannedHosts/>
          <whiteList/>
          <blackList/>
          <browser/>
          <mimeType/>
          <safePorts>80:http,21:ftp,443:https,70:gopher,210:wais,1025-65535:unregistered ports,280:http-mgmt,488:gss-http,591:filemaker,777:multiling http</safePorts>
          <sslPorts>443:https</sslPorts>
          <remoteACLs>
            <blacklists/>
            <UpdateCron/>
          </remoteACLs>
        </acl>
        <icap>
          <enable>0</enable>
          <RequestURL>icap://[::1]:1344/avscan</RequestURL>
          <ResponseURL>icap://[::1]:1344/avscan</ResponseURL>
          <SendClientIP>1</SendClientIP>
          <SendUsername>0</SendUsername>
          <EncodeUsername>0</EncodeUsername>
          <UsernameHeader>X-Username</UsernameHeader>
          <EnablePreview>1</EnablePreview>
          <PreviewSize>1024</PreviewSize>
          <OptionsTTL>60</OptionsTTL>
          <exclude/>
        </icap>
        <authentication>
          <method/>
          <realm>OPNsense proxy authentication</realm>
          <credentialsttl>2</credentialsttl>
          <children>5</children>
        </authentication>
      </forward>
      <pac/>
    </proxy>
    <TrafficShaper version="1.0.3">
      <pipes/>
      <queues/>
      <rules/>
    </TrafficShaper>
    <IDS version="1.0.3">
      <rules/>
      <userDefinedRules/>
      <files/>
      <fileTags/>
      <general>
        <enabled>0</enabled>
        <ips>0</ips>
        <promisc>0</promisc>
        <interfaces>wan</interfaces>
        <homenet>192.168.0.0/16,10.0.0.0/8,172.16.0.0/12</homenet>
        <defaultPacketSize/>
        <UpdateCron/>
        <AlertLogrotate>W0D23</AlertLogrotate>
        <AlertSaveLogs>4</AlertSaveLogs>
        <MPMAlgo>ac</MPMAlgo>
        <syslog>0</syslog>
        <syslog_eve>0</syslog_eve>
        <LogPayload>0</LogPayload>
      </general>
    </IDS>
    <Syslog version="1.0.0">
      <general>
        <enabled>1</enabled>
      </general>
      <destinations/>
    </Syslog>
  </OPNsense>
  <gateways>
    <gateway_item/>
  </gateways>
  <ca/>
  <cert>
    <refid>5d24bbe5aadd5</refid>
    <descr>Web GUI SSL certificate</descr>
    <crt>LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZiekNDQTFlZ0F3SUJBZ0lKQUlaU1VySUYyNk1ETUEwR0NTcUdTSWIzRFFFQkN3VUFNRTR4Q3pBSkJnTlYKQkFZVEFrNU1NUlV3RXdZRFZRUUlEQXhhZFdsa0xVaHZiR3hoYm1ReEZUQVRCZ05WQkFjTURFMXBaR1JsYkdoaApjbTVwY3pFUk1BOEdBMVVFQ2d3SVQxQk9jMlZ1YzJVd0hoY05NVGt3TnpBNU1UWXdPREEyV2hjTk1qQXdOekE0Ck1UWXdPREEyV2pCT01Rc3dDUVlEVlFRR0V3Sk9UREVWTUJNR0ExVUVDQXdNV25WcFpDMUliMnhzWVc1a01SVXcKRXdZRFZRUUhEQXhOYVdSa1pXeG9ZWEp1YVhNeEVUQVBCZ05WQkFvTUNFOVFUbk5sYm5ObE1JSUNJakFOQmdrcQpoa2lHOXcwQkFRRUZBQU9DQWc4QU1JSUNDZ0tDQWdFQXpVcTNxM3VIdHRxWlNaWVU1UWVuU1p1TXVFTGtCdmRtCnRGcy9FREJwTkZTQ01NcXpGY0hSM05iMFQ2L3FEV0RxSFJqSGRGRVZNNDZIVXcxelFVNU8yK3NyL2ZDb1UyaGoKOXY5dmVHcC9rRlpycnFaWGxZSFMzS3B6c2M2YUJlRGZ4SFY4TlRZeTR0NE9BMkNpS2J5MDB4bXByeXRrdWUzTwpTUG1lSGREQ1FHVk5Tc2lrYTBQbThTb0RDaWlESmJsb0E5dnJQYURQRnVLWm91YldiYU1aTlhQVTU4cFR3NkxmCnJGcWt6TmYwRTArV2FoMmhreEhVNENwRCtDckVuNWtaWWpoVVhCTGw1L29tbnFWeEl4b3FaZEhpcGtsRW0xSGEKam5yd1hKVWpxb3NmOEsySURIYjZXc1JzdVFJbElBcHhPdEMyenZ2V1ErYnpYekhlOUV3MFNBU0ZEYm42RFZHSQpjbVlzTGRkWHNvVTJjWlc1bFRJWVB4SE9SZ3pmNjQ1UEloQkpwdjhKc0tqa2RPUCtUWCtsVkZ2YmxQMzN4T2ZrCjVFek5WQXF6VmxzaEhYOUt1Uy80R3hjWTQ3eFptUHJSNFpqcm1Ea05Sdm1Sb3B4ZEh1eTJrOWxjQ0cvVGxFeVIKTEFncThqRkJGN3BORC9wa3p4YVlodGJxVGl0RzlFTWc2YWFRQUxkOWxPakVxL2NHa054ZzdUU0NYaG14ckUzbQpHMzY4UE02RVNialJUV3NOT1E2eTlRU1YxWHZhbWNLQk5tNnAwcElWaGR4K3VJWlRDL1FOUnFJSi9CZjNDQWdxCk9MdTJIZXRVY2RJek1SOWl1UGNXb1gzTUVvMm82VDdJMVVOdXB5a1BpN1JoZ3dEbTMwbWd5WE4rQzhxam0wS2MKSlg2U2F3anhaRmtDQXdFQUFhTlFNRTR3SFFZRFZSME9CQllFRlBHOTRpbUxkeHdWY05xNmpxSWk0MmJTc0JlcApNQjhHQTFVZEl3UVlNQmFBRlBHOTRpbUxkeHdWY05xNmpxSWk0MmJTc0JlcE1Bd0dBMVVkRXdRRk1BTUJBZjh3CkRRWUpLb1pJaHZjTkFRRUxCUUFEZ2dJQkFBRFVlbDFINjhuZ0szMXlCcThaQjZVeE1FR29XTE1aN1l1Q011UDgKSUZsc05yTkRJM012TUxEVnFRdXpoR1luNW1HVFF6cWZLdnF2eW1qYVU1UDBBdThOSm81SHRIU3d4TXNUSVdpUgpFVFRtQjM4My9VYjg3UEtmVUg0KzRaMzg3eEJNSDF2L21jT29sZERSdnRBYWJ0NzNXeDlWZjRDZmp2VWdtKzc4CkpIWXlKb3RiT1l5QkM1L3ZQOFdrc0hRdjB4Y2Yvdm1mSlN6SDIxRmcwdEJodDR2RUMvUndwQWdVSkRWMDJac3kKcDVLNWFiRUpvNWxKbzc3MGlkK3pqTWk4SUw3VmZlZ0NuRU1ZVEVFd2tOSk0vaVNBUHprR1NtdndwZzJiR3ZKWQpqTkVMN1BDRkJuWWxKdEpmQ3FkaHFoMTRPVXpwbDEzclkyQkFnM0RCTVVzQzFmRU5jU3FqNTVhUEVyU1RtbGxYCmRoSWxyRWJNeGNURmZBU1RUQk5sMmVQcCtrcTg1RGF4QzVxa2ZQV2tTdlJ2WkZ2L3NscmRlREo4WThlUllLRDgKWWNZZ1FUaVh0czRZUmw1U3VwaWhjNGxxdGhzRitXdkM3TzVWQXh2ZEdWYlZRR0h3Z1YrVmpHNTVmWlZLbWRpNgo0d3BDbUp6bWozRzFmRkhPSm5BNG4wSFVMYWM3SEN4cXZOL0pSeGRGSjlXUnRzbnR1Rm54YitEYlBoQXdRMkUwCmZNSE8xYVU4dnVXSkl4ZjBPc1lHZ0QzbEJqUlUrQ2FyOEkwcVhtUEQ0czFHNnFxMzZnT1k0UXRETzJ5WUl2RjEKQ2RVTklycFBaeTVBR0lqM1l3RUNVR2NjVHNaRCtMYkY3WmFTNVdneWlnZjNzcG85YUQxSFVSK20xd1I0dmd3cgp0YTJkCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K</crt>
    <prv>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</prv>
  </cert>
  <vlans>
    <vlan>
      <if>igb0</if>
      <tag>832</tag>
      <pcp>0</pcp>
      <descr>Orange FTTP VLAN</descr>
      <vlanif>igb0_vlan832</vlanif>
    </vlan>
    <vlan>
      <if>igb2</if>
      <tag>832</tag>
      <pcp>0</pcp>
      <descr>Orange FTTP VLAN</descr>
      <vlanif>igb2_vlan832</vlanif>
    </vlan>
  </vlans>
  <ppps>
    <ppp/>
  </ppps>
  <dhcpdv6/>
  <openvpn>
    <openvpn-server/>
    <openvpn-client/>
  </openvpn>
  <virtualip>
    <vip/>
  </virtualip>
  <staticroutes/>
</opnsense>
