<?xml version="1.0"?>
<m0n0wall>
	<version>1.4</version>
	<system>
		<hostname>m0n0wall</hostname>
		<domain>local</domain>
		<dnsallowoverride/>
		<username>admin</username>
		<password>**removed**</password>
		<timezone>America/New_York</timezone>
		<time-update-interval>300</time-update-interval>
		<timeservers>SBS2K3</timeservers>
		<webgui>
			<protocol>http</protocol>
			<port/>
		</webgui>
	</system>
	<interfaces>
		<lan>
			<if>sis0</if>
			<ipaddr>192.168.xxx.254</ipaddr>
			<subnet>24</subnet>
		</lan>
		<wan>
			<if>sis1</if>
			<spoofmac/>
			<mtu/>
			<ipaddr>dhcp</ipaddr>
			<dhcphostname/>
		</wan>
		<opt1>
			<descr>LAN2</descr>
			<if>sis2</if>
			<ipaddr>172.16.xxx.254</ipaddr>
			<subnet>24</subnet>
			<bridge/>
			<enable/>
		</opt1>
	</interfaces>
	<staticroutes/>
	<pppoe/>
	<pptp/>
	<dyndns>
		<type>dyndns</type>
		<username/>
		<password/>
		<host/>
		<mx/>
	</dyndns>
	<dhcpd>
		<lan>
			<range>
				<from>192.168.xxx.100</from>
				<to>192.168.xxx.199</to>
			</range>
			<defaultleasetime/>
			<maxleasetime/>
		</lan>
		<opt1>
			<range>
				<from>172.16.xxx.101</from>
				<to>172.16.xxx.124</to>
			</range>
			<defaultleasetime>86400</defaultleasetime>
			<maxleasetime/>
			<enable/>
			<staticmap>
				<mac>**removed**</mac>
				<ipaddr>172.16.xxx.200</ipaddr>
				<descr>HTPC</descr>
			</staticmap>
			<staticmap>
				<mac>**removed**</mac>
				<ipaddr/>
				<descr>Netgear 802.11b USB (MA111)</descr>
			</staticmap>
			<staticmap>
				<mac>**removed**</mac>
				<ipaddr/>
				<descr>SMC 802.11b PCI Card</descr>
			</staticmap>
			<staticmap>
				<mac>**removed**</mac>
				<ipaddr/>
				<descr>Home03 - House PC</descr>
			</staticmap>
			<staticmap>
				<mac>**removed**</mac>
				<ipaddr/>
				<descr>Microsoft 802.11g PCI Card</descr>
			</staticmap>
			<staticmap>
				<mac>**removed**</mac>
				<ipaddr/>
				<descr>SMC 802.11b PC Card</descr>
			</staticmap>
			<denyunknown/>
		</opt1>
	</dhcpd>
	<pptpd>
		<mode>server</mode>
		<redir>SBS2k3</redir>
		<localip>**removed**</localip>
		<remoteip>**removed**</remoteip>
		<radius>
			<enable/>
			<server>SBS2K3</server>
			<secret>**removed**</secret>
		</radius>
		<req128/>
	</pptpd>
	<dnsmasq>
		<enable/>
		<regdhcp/>
	</dnsmasq>
	<snmpd>
		<syslocation/>
		<syscontact/>
		<rocommunity>public</rocommunity>
	</snmpd>
	<diag>
		<ipv6nat>
			<ipaddr/>
		</ipv6nat>
	</diag>
	<bridge/>
	<syslog>
		<reverse/>
		<nentries>50</nentries>
		<remoteserver/>
	</syslog>
	<nat>
		<rule>
			<protocol>udp</protocol>
			<external-port>500</external-port>
			<target>**removed**</target>
			<local-port>500</local-port>
			<interface>wan</interface>
			<descr>NAT IKE to mypc</descr>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>25</external-port>
			<target>SBS2K3</target>
			<local-port>25</local-port>
			<interface>wan</interface>
			<descr>Test</descr>
		</rule>
	</nat>
	<filter>
		<rule>
			<type>pass</type>
			<interface>wan</interface>
			<protocol>udp</protocol>
			<source>
				<any/>
				<port>500</port>
			</source>
			<destination>
				<any/>
				<port>500</port>
			</destination>
			<descr>Pass port 500 (IKE any)</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>pptp</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<network>lan</network>
			</destination>
			<descr>Default PPTP -&gt; LAN</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>opt1</interface>
			<protocol>tcp/udp</protocol>
			<source>
				<network>opt1</network>
			</source>
			<destination>
				<address>LANoIP</address>
				<port>53</port>
			</destination>
			<descr>LAN2 -&gt; LAN DNS</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>opt1</interface>
			<protocol>tcp/udp</protocol>
			<source>
				<network>opt1</network>
			</source>
			<destination>
				<address>SBS2K3</address>
				<port>123</port>
			</destination>
			<descr>LAN2 -&gt; LAN SNTP</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>opt1</interface>
			<source>
				<network>opt1</network>
			</source>
			<destination>
				<network>lan</network>
				<not/>
			</destination>
			<descr>Default LAN2 -&gt; Any (not LAN)</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>lan</interface>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any/>
			</destination>
			<descr>Default LAN -&gt; any</descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>SBS2K3</address>
				<port>25</port>
			</destination>
			<descr>NAT Test</descr>
		</rule>
	</filter>
	<shaper>
		<pipe>
			<bandwidth>192</bandwidth>
			<descr>UpStream Bandwidth</descr>
		</pipe>
		<queue>
			<targetpipe>0</targetpipe>
			<weight>2</weight>
			<descr>High Priority UpStream</descr>
		</queue>
		<queue>
			<targetpipe>0</targetpipe>
			<weight>1</weight>
			<descr>Low Priority UpStream</descr>
		</queue>
		<rule>
			<interface>wan</interface>
			<source>
				<address>VonageATA</address>
			</source>
			<destination>
				<any/>
			</destination>
			<direction>out</direction>
			<iplen/>
			<tcpflags/>
			<descr>VoIP -&gt; Any</descr>
			<targetqueue>0</targetqueue>
		</rule>
		<rule>
			<interface>wan</interface>
			<source>
				<address>VonageATA</address>
				<not/>
			</source>
			<destination>
				<any/>
			</destination>
			<direction>out</direction>
			<iplen/>
			<tcpflags/>
			<descr>non-VoIP -&gt; Any</descr>
			<targetqueue>1</targetqueue>
		</rule>
	</shaper>
	<ipsec>
		<mobileclients>
			<p1>
				<mode>aggressive</mode>
				<myident>
					<fqdn>MobileVPN</fqdn>
				</myident>
				<encryption-algorithm>3des</encryption-algorithm>
				<hash-algorithm>sha1</hash-algorithm>
				<dhgroup>2</dhgroup>
				<lifetime>28800</lifetime>
			</p1>
			<p2>
				<protocol>esp</protocol>
				<encryption-algorithm-option>3des</encryption-algorithm-option>
				<hash-algorithm-option>hmac_sha1</hash-algorithm-option>
				<pfsgroup>2</pfsgroup>
				<lifetime>28800</lifetime>
			</p2>
		</mobileclients>
		<mobilekey>
			<ident>james@mckeand.biz</ident>
			<pre-shared-key>**removed**</pre-shared-key>
		</mobilekey>
	</ipsec>
	<aliases>
		<alias>
			<name>LAN2oIP</name>
			<address>172.16.xxx.254</address>
			<descr>m0n0wall LAN2 IP</descr>
		</alias>
		<alias>
			<name>LANoIP</name>
			<address>192.168.xxx.254</address>
			<descr>m0n0wall LAN IP</descr>
		</alias>
		<alias>
			<name>SBS2K3</name>
			<address>**removed**</address>
			<descr>MCllc Small Business Server</descr>
		</alias>
		<alias>
			<name>VonageATA</name>
			<address>**removed**</address>
			<descr>Vonage Cisco ATA 186</descr>
		</alias>
	</aliases>
	<proxyarp/>
	<captiveportal>
		<passthrumac>
			<mac>**removed**</mac>
			<descr>Netgear 802.11b USB (MA111)</descr>
		</passthrumac>
		<passthrumac>
			<mac>**removed**</mac>
			<descr>Microsoft 802.11g PCI Card</descr>
		</passthrumac>
		<passthrumac>
			<mac>**removed**</mac>
			<descr>HTPC</descr>
		</passthrumac>
		<passthrumac>
			<mac>**removed**</mac>
			<descr>SMC 802.11b PC Card</descr>
		</passthrumac>
		<passthrumac>
			<mac>**removed**</mac>
			<descr>SMC 802.11b PCI Card</descr>
		</passthrumac>
		<passthrumac>
			<mac>**removed**</mac>
			<descr>Home03 - House PC</descr>
		</passthrumac>
		<interface>opt1</interface>
		<timeout>120</timeout>
		<idletimeout>90</idletimeout>
		<logoutwin_enable/>
		<radiusip/>
		<radiusport/>
		<radiuskey/>
	</captiveportal>
</m0n0wall>
