<?xml version="1.0"?>
<m0n0wall>
	<version>1.6</version>
	<system>
		<hostname>***</hostname>
		<domain>***</domain>
		<dnsallowoverride/>
		<username>admin</username>
		<password>***</password>
		<timezone>America/Chicago</timezone>
		<time-update-interval>300</time-update-interval>
		<timeservers>pool.ntp.org</timeservers>
		<webgui>
			<protocol>https</protocol>
			<port/>
			<certificate/>
			<private-key/>
			<expanddiags/>
		</webgui>
		<harddiskstandby>10</harddiskstandby>
		<notes>***</notes>
		<dnsserver>66.196.216.10</dnsserver>
		<dnsserver>4.2.2.2</dnsserver>
	</system>
	<interfaces>
		<lan>
			<if>rl1</if>
			<ipaddr>172.17.2.1</ipaddr>
			<subnet>24</subnet>
		</lan>
		<wan>
			<if>rl0</if>
			<mtu/>
			<blockpriv/>
			<ipaddr>***</ipaddr>
			<subnet>29</subnet>
			<gateway>***</gateway>
			<spoofmac/>
		</wan>
	</interfaces>
	<staticroutes/>
	<pppoe/>
	<pptp/>
	<bigpond/>
	<dyndns>
		<type>dyndns</type>
		<username/>
		<password/>
		<host>***.dnsalias.net</host>
		<mx/>
		<server/>
		<port/>
	</dyndns>
	<dhcpd>
		<lan>
			<enable/>
			<range>
				<from>172.17.2.150</from>
				<to>172.17.2.200</to>
			</range>
			<staticmap>
				<mac>00:04:5a:4e:84:2e</mac>
				<ipaddr>172.17.2.99</ipaddr>
				<descr>Maintenance System</descr>
			</staticmap>
			<defaultleasetime/>
			<maxleasetime/>
		</lan>
	</dhcpd>
	<pptpd>
		<mode>server</mode>
		<redir/>
		<localip>172.17.2.239</localip>
		<remoteip>172.17.2.240</remoteip>
		<radius>
			<server/>
			<secret/>
		</radius>
		<user>
			<name>admin</name>
			<ip/>
			<password>tcs</password>
		</user>
		<user>
			<name>lsharp</name>
			<ip/>
			<password>outside</password>
		</user>
	</pptpd>
	<dnsmasq>
		<enable/>
		<regdhcp/>
		<hosts>
			<host>maintenance</host>
			<domain>dnsalias.net</domain>
			<ip>172.17.2.99</ip>
			<descr>Maintenance static mapping</descr>
		</hosts>
	</dnsmasq>
	<snmpd>
		<syslocation/>
		<syscontact/>
		<rocommunity>public</rocommunity>
	</snmpd>
	<diag>
		<ipv6nat>
			<ipaddr/>
		</ipv6nat>
	</diag>
	<bridge/>
	<syslog/>
	<nat>
		<rule>
			<protocol>tcp</protocol>
			<external-port>5800</external-port>
			<target>172.17.2.99</target>
			<local-port>5800</local-port>
			<interface>wan</interface>
			<descr>VNC Port for Maintenance system</descr>
		</rule>
		<rule>
			<protocol>tcp</protocol>
			<external-port>5900</external-port>
			<target>172.17.2.99</target>
			<local-port>5900</local-port>
			<interface>wan</interface>
			<descr>VNC Port for Maintenance system</descr>
		</rule>
	</nat>
	<filter>
		<rule>
			<type>pass</type>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
				<port>443</port>
			</destination>
			<descr>Allow Remote Admin</descr>
		</rule>
		<rule>
			<type>pass</type>
			<descr>Default LAN -&gt; any</descr>
			<interface>lan</interface>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any/>
			</destination>
		</rule>
		<rule>
			<type>pass</type>
			<interface>pptp</interface>
			<source>
				<any/>
			</source>
			<destination>
				<any/>
			</destination>
			<descr>Default PPtP -&gt; Any</descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>172.17.2.99</address>
				<port>5800</port>
			</destination>
			<descr>NAT VNC Port for Maintenance system</descr>
		</rule>
		<rule>
			<interface>wan</interface>
			<protocol>tcp</protocol>
			<source>
				<any/>
			</source>
			<destination>
				<address>172.17.2.99</address>
				<port>5900</port>
			</destination>
			<descr>NAT VNC for Maintenance system</descr>
		</rule>
		<tcpidletimeout/>
	</filter>
	<shaper/>
	<ipsec/>
	<aliases/>
	<proxyarp/>
	<wol/>
	<lastchange>1139533355</lastchange>
	<dnsupdate>
		<host/>
		<ttl>60</ttl>
		<keyname/>
		<keydata/>
	</dnsupdate>
</m0n0wall>
