<?xml version="1.0"?>
<m0n0wall>
	<version>1.6</version>
	<lastchange>1132665110</lastchange>
	<system>
		<hostname>m0n0wall</hostname>
		<domain>workgroup</domain>
		<username>admin</username>
		<password>$1$w49ibv2Z$zxi3Sw9ZAalur3XYZ9LB2.</password>
		<timezone>Europe/Ljubljana</timezone>
		<time-update-interval>300</time-update-interval>
		<timeservers>ntp1.arnes.si</timeservers>
		<webgui>
			<protocol>http</protocol>
			<port/>
			<certificate/>
			<private-key/>
		</webgui>
		<dnsserver>193.2.1.66</dnsserver>
		<dnsserver>193.2.1.72</dnsserver>
		<polling/>
	</system>
	<interfaces>
		<lan>
			<if>rl1</if>
			<ipaddr>192.168.10.111</ipaddr>
			<subnet>24</subnet>
			<media/>
			<mediaopt/>
		</lan>
		<wan>
			<if>rl0</if>
			<mtu/>
			<blockpriv/>
			<media/>
			<mediaopt/>
			<spoofmac/>
			<ipaddr>194.249.51.74</ipaddr>
			<subnet>26</subnet>
			<gateway>194.249.51.65</gateway>
		</wan>
		<opt1>
			<if>rl2</if>
			<descr>DMZ</descr>
			<ipaddr>192.168.1.1</ipaddr>
			<subnet>24</subnet>
			<bridge/>
			<enable/>
		</opt1>
	</interfaces>
	<staticroutes/>
	<pppoe/>
	<pptp/>
	<bigpond/>
	<dyndns>
		<type>dyndns</type>
		<username/>
		<password/>
		<host/>
		<mx/>
		<server/>
		<port/>
	</dyndns>
	<dnsupdate/>
	<dhcpd>
		<lan>
			<enable/>
			<range>
				<from>192.168.10.230</from>
				<to>192.168.10.250</to>
			</range>
		</lan>
	</dhcpd>
	<pptpd>
		<mode/>
		<redir/>
		<localip/>
		<remoteip/>
	</pptpd>
	<dnsmasq>
		<enable/>
		<regdhcp/>
		<hosts>
			<host>afkp</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>konik</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>lists</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>malecot</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>me</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>posta</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>stupar</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>xmail</host>
			<domain>homelinux.net</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
		<hosts>
			<host>mig29</host>
			<domain>workgroup</domain>
			<ip>192.168.1.200</ip>
			<descr/>
		</hosts>
	</dnsmasq>
	<snmpd>
		<syslocation/>
		<syscontact/>
		<rocommunity>public</rocommunity>
	</snmpd>
	<diag>
		<ipv6nat>
			<ipaddr/>
		</ipv6nat>
	</diag>
	<bridge/>
	<syslog>
		<nentries>50</nentries>
		<remoteserver>192.168.1.200</remoteserver>
		<filter/>
		<dhcp/>
		<system/>
		<reverse/>
		<portalauth/>
		<vpn/>
		<enable/>
	</syslog>
	<nat>
		<advancedoutbound/>
		<rule>
			<protocol>tcp</protocol>
			<external-port>21</external-port>
			<target>192.168.1.200</target>
			<local-port>21</local-port>
			<interface>wan</interface>
			<descr/>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>25</external-port>
			<target>192.168.1.200</target>
			<local-port>25</local-port>
			<interface>wan</interface>
			<descr/>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>80</external-port>
			<target>192.168.1.200</target>
			<local-port>80</local-port>
			<interface>wan</interface>
			<descr/>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>110</external-port>
			<target>192.168.1.200</target>
			<local-port>110</local-port>
			<interface>wan</interface>
			<descr/>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>143</external-port>
			<target>192.168.1.200</target>
			<local-port>143</local-port>
			<interface>wan</interface>
			<descr/>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>443</external-port>
			<target>192.168.1.200</target>
			<local-port>443</local-port>
			<interface>wan</interface>
			<descr/>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>465</external-port>
			<target>192.168.1.200</target>
			<local-port>465</local-port>
			<interface>wan</interface>
			<descr>SMTPS</descr>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>993</external-port>
			<target>192.168.1.200</target>
			<local-port>993</local-port>
			<interface>wan</interface>
			<descr>POP3S</descr>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>995</external-port>
			<target>192.168.1.200</target>
			<local-port>995</local-port>
			<interface>wan</interface>
			<descr>IMAPS</descr>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>587</external-port>
			<target>192.168.1.200</target>
			<local-port>587</local-port>
			<interface>wan</interface>
			<descr>MSA</descr>
		</rule>
	</nat>
	<filter>
		<rule>
			<type>pass</type>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>21</port>
			</destination>
			<descr>NAT </descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>20</port>
			</destination>
			<descr>FTP-DATA</descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>80</port>
			</destination>
			<descr>NAT </descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>110</port>
			</destination>
			<descr>NAT </descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>443</port>
			</destination>
			<descr>NAT </descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>143</port>
			</destination>
			<descr>NAT </descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>25</port>
			</destination>
			<descr>NAT </descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>465</port>
			</destination>
			<descr/>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>993</port>
			</destination>
			<descr>NAT POP3S</descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>995</port>
			</destination>
			<descr>NAT IMAPS</descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>192.168.1.200</address>
				<port>587</port>
			</destination>
			<descr>NAT MSA</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>opt1</interface>
			<protocol>tcp/udp</protocol>
			<source>
				<network>opt1</network>
			</source>
			<destination>
				<network>lan</network>
				<port>515</port>
			</destination>
			<descr>Permit DMZ to LAN printer</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>opt1</interface>
			<source>
				<network>opt1</network>
			</source>
			<destination>
				<network>lan</network>
				<not/>
			</destination>
			<descr>Permit DMZ to any except LAN</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>lan</interface>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<network>lan</network>
			</destination>
			<descr>Allow LAN -&gt; LAN</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>lan</interface>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<network>opt1</network>
			</destination>
			<descr>Allow LAN -&gt; DMZ</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>lan</interface>
			<protocol>tcp/udp</protocol>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any/>
				<port>1-24</port>
			</destination>
			<descr>Allow LAN -&gt; WAN</descr>
		</rule>
		<rule>
			<type>pass</type>
			<interface>lan</interface>
			<protocol>tcp/udp</protocol>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any/>
				<port>26-65535</port>
			</destination>
			<descr>Allow LAN -&gt; WAN</descr>
		</rule>
		<tcpidletimeout/>
	</filter>
	<ipsec/>
	<aliases/>
	<proxyarp/>
	<wol/>
	<shaper>
		<enable/>
		<pipe>
			<descr>m_Total Upload</descr>
			<bandwidth>346</bandwidth>
		</pipe>
		<pipe>
			<descr>m_Total Download</descr>
			<bandwidth>1946</bandwidth>
		</pipe>
		<queue>
			<descr>m_High Priority #1 Upload</descr>
			<targetpipe>0</targetpipe>
			<weight>50</weight>
			<mask>source</mask>
		</queue>
		<queue>
			<descr>m_High Priority #2 Upload</descr>
			<targetpipe>0</targetpipe>
			<weight>30</weight>
			<mask>source</mask>
		</queue>
		<queue>
			<descr>m_High Priority #3 Upload</descr>
			<targetpipe>0</targetpipe>
			<weight>15</weight>
			<mask>source</mask>
		</queue>
		<queue>
			<descr>m_Bulk Upload</descr>
			<targetpipe>0</targetpipe>
			<weight>4</weight>
			<mask>source</mask>
		</queue>
		<queue>
			<descr>m_Hated Upload</descr>
			<targetpipe>0</targetpipe>
			<weight>1</weight>
			<mask>source</mask>
		</queue>
		<queue>
			<descr>m_Bulk Download</descr>
			<targetpipe>1</targetpipe>
			<weight>30</weight>
			<mask>destination</mask>
		</queue>
		<queue>
			<descr>m_Hated Download</descr>
			<targetpipe>1</targetpipe>
			<weight>10</weight>
			<mask>destination</mask>
		</queue>
		<queue>
			<descr>m_High Priority Download</descr>
			<targetpipe>1</targetpipe>
			<weight>60</weight>
			<mask>destination</mask>
		</queue>
		<rule>
			<descr>m_TCP ACK Upload</descr>
			<targetqueue>2</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<iplen>0-80</iplen>
			<protocol>tcp</protocol>
			<tcpflags>ack</tcpflags>
		</rule>
		<rule>
			<descr>m_Small Pkt Upload</descr>
			<targetqueue>0</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<iplen>0-100</iplen>
		</rule>
		<rule>
			<descr>m_Outbound DNS Query</descr>
			<targetqueue>0</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
				<port>53</port>
			</destination>
			<protocol>udp</protocol>
		</rule>
		<rule>
			<descr>m_AH Upload</descr>
			<targetqueue>0</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>ah</protocol>
		</rule>
		<rule>
			<descr>m_ESP Upload</descr>
			<targetqueue>0</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>esp</protocol>
		</rule>
		<rule>
			<descr>m_GRE Upload</descr>
			<targetqueue>0</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>gre</protocol>
		</rule>
		<rule>
			<descr>m_ICMP Upload</descr>
			<targetqueue>1</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>icmp</protocol>
		</rule>
		<rule>
			<descr>m_Catch-All Upload</descr>
			<targetqueue>3</targetqueue>
			<interface>wan</interface>
			<direction>out</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
		</rule>
		<rule>
			<descr>m_ICMP Download</descr>
			<targetqueue>7</targetqueue>
			<interface>wan</interface>
			<direction>in</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>icmp</protocol>
		</rule>
		<rule>
			<descr>m_Small Pkt Download</descr>
			<targetqueue>7</targetqueue>
			<interface>wan</interface>
			<direction>in</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<iplen>0-100</iplen>
		</rule>
		<rule>
			<descr>m_AH Download</descr>
			<targetqueue>7</targetqueue>
			<interface>wan</interface>
			<direction>in</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>ah</protocol>
		</rule>
		<rule>
			<descr>m_ESP Download</descr>
			<targetqueue>7</targetqueue>
			<interface>wan</interface>
			<direction>in</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>esp</protocol>
		</rule>
		<rule>
			<descr>m_GRE Download</descr>
			<targetqueue>7</targetqueue>
			<interface>wan</interface>
			<direction>in</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<protocol>gre</protocol>
		</rule>
		<rule>
			<descr>m_Catch-All Download</descr>
			<targetqueue>5</targetqueue>
			<interface>wan</interface>
			<direction>in</direction>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
		</rule>
		<magic>
			<maskq/>
			<maxup>384</maxup>
			<maxdown>2048</maxdown>
		</magic>
	</shaper>
</m0n0wall>
