<?xml version="1.0"?>
<m0n0wall>
        <version>1.4</version>
        <system>
                <hostname>m0n0wall</hostname>
                <domain>andreas-mueller.com</domain>
                <dnsallowoverride/>
                <password>***************</password>
                <timezone>Europe/Berlin</timezone>
                <time-update-interval>300</time-update-interval>
                <timeservers>ntp1.ptb.de</timeservers>
                <webgui>
                        <protocol>http</protocol>
                        <port/>
                </webgui>
                <dnsserver>129.187.10.25</dnsserver>
                <dnsserver>129.187.16.1</dnsserver>
        </system>
        <interfaces>
                <lan>
                        <if>xl0</if>
                        <ipaddr>172.16.123.254</ipaddr>
                        <subnet>16</subnet>
                </lan>
                <wan>
                        <if>xl1</if>
                        <spoofmac/>
                        <mtu/>
                        <ipaddr>pptp</ipaddr>
                </wan>
        </interfaces>
        <staticroutes/>
        <pppoe/>
        <pptp>
                <username>**************</username>
                <password>**************</password>
                <local>10.0.0.1</local>
                <subnet>8</subnet>
                <remote>10.0.0.138</remote>
        </pptp>
        <dyndns>
                <type>easydns</type>
                <username>**************</username>
                <password>**************</password>
                <host>server.andreas-mueller.com</host>
                <mx/>
                <enable/>
        </dyndns>
        <dhcpd>
                <lan>
                        <enable/>
                        <range>
                                <from>172.16.123.100</from>
                                <to>172.16.123.200</to>
                        </range>
                        <defaultleasetime>604800</defaultleasetime>
                        <maxleasetime>1209600</maxleasetime>
                </lan>
                <opt1>
                        <range>
                                <from>172.20.0.100</from>
                                <to>172.20.0.200</to>
                        </range>
                        <defaultleasetime>604800</defaultleasetime>
                        <maxleasetime>1209600</maxleasetime>
                        <enable/>
                </opt1>
        </dhcpd>
        <pptpd>
                <mode>off</mode>
                <redir/>
                <localip>172.16.123.253</localip>
                <remoteip>172.16.123.208</remoteip>
                <radius>
                        <server/>
                        <secret/>
                </radius>
                <user>
                        <name>*************</name>
                        <password>****************</password>
                </user>
        </pptpd>
        <dnsmasq>
                <enable/>
                <regdhcp/>
                <hosts>
                        <host>mail</host>
                        <domain>andreas-mueller.com</domain>
                        <ip>172.16.123.1</ip>
                        <descr>Server</descr>
                </hosts>
                <hosts>
                        <host>server</host>
                        <domain>andreas-mueller.com</domain>
                        <ip>172.16.123.1</ip>
                        <descr>Server</descr>
                </hosts>
                <hosts>
                        <host>vpn</host>
                        <domain>andreas-mueller.com</domain>
                        <ip>172.16.123.254</ip>
                        <descr/>
                </hosts>
                <hosts>
                        <host>www</host>
                        <domain>andreas-mueller.com</domain>
                        <ip>172.16.123.1</ip>
                        <descr>Server</descr>
                </hosts>
        </dnsmasq>
        <snmpd>
                <syslocation/>
                <syscontact/>
                <rocommunity>public</rocommunity>
        </snmpd>
        <diag>
                <ipv6nat>
                        <ipaddr/>
                </ipv6nat>
        </diag>
        <bridge/>
        <syslog>
                <nentries>50</nentries>
                <remoteserver/>
                <reverse/>
        </syslog>
        <nat>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>21</external-port>
                        <target>172.16.123.1</target>
                        <local-port>21</local-port>
                        <descr>FTP Server</descr>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>25</external-port>
                        <target>172.16.123.1</target>
                        <local-port>25</local-port>
                        <descr>SMTP Server</descr>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>80</external-port>
                        <target>172.16.123.1</target>
                        <local-port>80</local-port>
                        <descr>HTTP Server</descr>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>143</external-port>
                        <target>172.16.123.1</target>
                        <local-port>143</local-port>
                        <descr/>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>6881-6889</external-port>
                        <target>172.16.123.101</target>
                        <local-port>6881</local-port>
                        <descr>BitTorrent</descr>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>50000-50030</external-port>
                        <target>172.16.123.101</target>
                        <local-port>50000</local-port>
                        <descr/>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>51000-51010</external-port>
                        <target>172.16.123.100</target>
                        <local-port>51000</local-port>
                        <descr>ICQ Notebook</descr>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>60000-62000</external-port>
                        <target>172.16.123.1</target>
                        <local-port>60000</local-port>
                        <descr>FTP Server</descr>
                </rule>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>10022</external-port>
                        <target>172.16.123.1</target>
                        <local-port>22</local-port>
                        <descr>SSH Server</descr>
                </rule>
        </nat>
        <filter>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.100</address>
                                <port>51000-51010</port>
                        </destination>
                        <descr>NAT ICQ Notebook</descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.1</address>
                                <port>21</port>
                        </destination>
                        <descr>NAT FTP Server</descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.1</address>
                                <port>60000-62000</port>
                        </destination>
                        <descr>NAT FTP Server</descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.1</address>
                                <port>25</port>
                        </destination>
                        <descr>NAT SMTP Server</descr>
                </rule>
                <rule>
                        <type>pass</type>
                        <interface>opt1</interface>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <descr/>
                </rule>
                <rule>
                        <type>pass</type>
                        <descr>Default LAN -&gt; any</descr>
                        <interface>lan</interface>
                        <source>
                                <network>lan</network>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.101</address>
                                <port>50000-50030</port>
                        </destination>
                        <descr>NAT </descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.101</address>
                                <port>6881-6889</port>
                        </destination>
                        <descr>NAT BitTorrent</descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.1</address>
                                <port>80</port>
                        </destination>
                        <descr>NAT HTTP Server</descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.1</address>
                                <port>143</port>
                        </destination>
                        <descr>NAT </descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>172.16.123.1</address>
                                <port>22</port>
                        </destination>
                        <descr>NAT SSH Server</descr>
                </rule>
        </filter>
        <shaper>
                <enable/>
                <pipe>
                        <bandwidth>100</bandwidth>
                        <descr>Test</descr>
                </pipe>
                <queue>
                        <targetpipe>0</targetpipe>
                        <weight>1</weight>
                        <descr>Tesst</descr>
                </queue>
                <queue>
                        <targetpipe>0</targetpipe>
                        <weight>10</weight>
                        <descr>Low Prio</descr>
                </queue>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <direction>out</direction>
                        <iplen/>
                        <tcpflags>ack</tcpflags>
                        <descr>Test</descr>
                        <targetqueue>0</targetqueue>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <direction>out</direction>
                        <iplen>0-200</iplen>
                        <tcpflags/>
                        <descr/>
                        <targetqueue>0</targetqueue>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <direction>out</direction>
                        <iplen/>
                        <tcpflags>syn</tcpflags>
                        <descr/>
                        <targetqueue>0</targetqueue>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <direction>out</direction>
                        <iplen/>
                        <tcpflags/>
                        <descr/>
                        <targetqueue>1</targetqueue>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                                <port>5190</port>
                        </destination>
                        <direction>out</direction>
                        <iplen/>
                        <tcpflags/>
                        <descr/>
                        <targetqueue>0</targetqueue>
                </rule>
        </shaper>
        <ipsec/>
        <aliases/>
</m0n0wall>
