gabriel/PF-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: gabriel:2a26992d075138fdcd2ae2f371281d1e9239a36b
Branches Tags
gabriel:main
...
compare: gabriel:35651a976e796cb3e36c77d8e66f521b9052fb7d
Branches Tags
gabriel:main

3 commits
2a26992d07 ... 35651a976e

Author SHA1 Message Date
pfSense Backup
35651a976e Backup pfSense du 20250313-211631 2025-03-13 21:16:31 +01:00
pfSense Backup
0a3b582971 Backup pfSense du 20250313-211422 2025-03-13 21:14:22 +01:00
pfSense Backup
4c10128468 Backup pfSense du 20250313-020000 2025-03-13 02:00:00 +01:00
1 changed files with 111 additions and 54 deletions
Show stats Expand all files Collapse all files

165
config-latest.xml
View file

@ -315,8 +315,7 @@
<rootpath></rootpath> <rootpath></rootpath>
<numberoptions></numberoptions> <numberoptions></numberoptions>
<netboot></netboot> <netboot></netboot>
<dnsserver>1.1.1.1</dnsserver> <dnsserver>192.168.2.1</dnsserver>
<dnsserver>1.0.0.1</dnsserver>
</lan> </lan>
<opt2> <opt2>
<range> <range>
@ -353,8 +352,7 @@
<uefihttpboot></uefihttpboot> <uefihttpboot></uefihttpboot>
<rootpath></rootpath> <rootpath></rootpath>
<numberoptions></numberoptions> <numberoptions></numberoptions>
<dnsserver>1.1.1.1</dnsserver> <dnsserver>172.10.0.1</dnsserver>
<dnsserver>1.0.0.1</dnsserver>
</opt2> </opt2>
<opt1> <opt1>
<range> <range>
@ -391,8 +389,7 @@
<uefihttpboot></uefihttpboot> <uefihttpboot></uefihttpboot>
<rootpath></rootpath> <rootpath></rootpath>
<numberoptions></numberoptions> <numberoptions></numberoptions>
<dnsserver>1.1.1.1</dnsserver> <dnsserver>156.16.0.1</dnsserver>
<dnsserver>1.0.0.1</dnsserver>
</opt1> </opt1>
</dhcpd> </dhcpd>
<dhcpdv6> <dhcpdv6>
@ -1605,9 +1602,12 @@
</nat> </nat>
<filter> <filter>
<rule> <rule>
<quick>yes</quick>
<floating>yes</floating>
<ipprotocol>inet</ipprotocol> <ipprotocol>inet</ipprotocol>
<type>reject</type> <type>reject</type>
<descr><![CDATA[pfB_PRI1_v4]]></descr> <direction>any</direction>
<descr><![CDATA[pfB_PRI1_v4 auto rule]]></descr>
<source> <source>
<any></any> <any></any>
</source> </source>
@ -1616,47 +1616,11 @@
</destination> </destination>
<log></log> <log></log>
<created> <created>
<time>1741730007</time> <time>1741767029</time>
<username><![CDATA[Auto]]></username> <username><![CDATA[Auto]]></username>
</created> </created>
<interface>lan</interface> <interface>lan,opt1,opt2</interface>
<tracker>1770008734</tracker> <tracker>1770005154</tracker>
</rule>
<rule>
<ipprotocol>inet</ipprotocol>
<type>reject</type>
<descr><![CDATA[pfB_PRI1_v4]]></descr>
<source>
<any></any>
</source>
<destination>
<address>pfB_PRI1_v4</address>
</destination>
<log></log>
<created>
<time>1741730007</time>
<username><![CDATA[Auto]]></username>
</created>
<interface>opt1</interface>
<tracker>1770008994</tracker>
</rule>
<rule>
<ipprotocol>inet</ipprotocol>
<type>reject</type>
<descr><![CDATA[pfB_PRI1_v4]]></descr>
<source>
<any></any>
</source>
<destination>
<address>pfB_PRI1_v4</address>
</destination>
<log></log>
<created>
<time>1741730007</time>
<username><![CDATA[Auto]]></username>
</created>
<interface>opt2</interface>
<tracker>1770009726</tracker>
</rule> </rule>
<rule> <rule>
<id></id> <id></id>
@ -2032,6 +1996,15 @@
<who>root</who> <who>root</who>
<command>/usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron &gt;&gt; /var/log/pfblockerng/pfblockerng.log 2&gt;&amp;1</command> <command>/usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron &gt;&gt; /var/log/pfblockerng/pfblockerng.log 2&gt;&amp;1</command>
</item> </item>
<item>
<minute>0</minute>
<hour>23</hour>
<mday>*</mday>
<month>*</month>
<wday>5</wday>
<who>root</who>
<command>/usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php dcc &gt;&gt; /var/log/pfblockerng/extras.log 2&gt;&amp;1</command>
</item>
</cron> </cron>
<wol> <wol>
<wolentry> <wolentry>
@ -2592,8 +2565,7 @@
</vlans> </vlans>
<qinqs></qinqs> <qinqs></qinqs>
<revision> <revision>
<time>1741741278</time> <time>1741895330</time>
<description><![CDATA[admin@192.168.2.11 (Local Database): Picture widget saved via Dashboard.]]></description>
<username><![CDATA[admin@192.168.2.11 (Local Database)]]></username> <username><![CDATA[admin@192.168.2.11 (Local Database)]]></username>
</revision> </revision>
<gateways> <gateways>
@ -3119,6 +3091,13 @@
</item> </item>
</plugins> </plugins>
</package> </package>
<package>
<name>Telegraf</name>
<descr><![CDATA[Telegraf is an agent written in Go for collecting, processing, aggregating, and writing metrics.]]></descr>
<version>0.9_6</version>
<configurationfile>telegraf.xml</configurationfile>
<include_file>/usr/local/pkg/telegraf.inc</include_file>
</package>
<vpn_openvpn_export> <vpn_openvpn_export>
<serverconfig> <serverconfig>
<item> <item>
@ -3288,6 +3267,12 @@
<section>Status</section> <section>Status</section>
<url>/haproxy/haproxy_stats.php?haproxystats=1</url> <url>/haproxy/haproxy_stats.php?haproxystats=1</url>
</menu> </menu>
<menu>
<name>Telegraf</name>
<section>Services</section>
<configfile>telegraf.xml</configfile>
<url>/pkg_edit.php?xml=telegraf.xml</url>
</menu>
<service> <service>
<name>bandwidthd</name> <name>bandwidthd</name>
<rcfile>bandwidthd.sh</rcfile> <rcfile>bandwidthd.sh</rcfile>
@ -3354,10 +3339,16 @@
<executable>haproxy</executable> <executable>haproxy</executable>
<description><![CDATA[TCP/HTTP(S) Load Balancer]]></description> <description><![CDATA[TCP/HTTP(S) Load Balancer]]></description>
</service> </service>
<service>
<name>telegraf</name>
<rcfile>telegraf.sh</rcfile>
<executable>telegraf</executable>
<description><![CDATA[Telegraf daemon]]></description>
</service>
<telegraf> <telegraf>
<config> <config>
<enable>on</enable> <enable>on</enable>
<interval>2</interval> <interval>10</interval>
<telegraf_output></telegraf_output> <telegraf_output></telegraf_output>
<influx_server></influx_server> <influx_server></influx_server>
<influx_db></influx_db> <influx_db></influx_db>
@ -3366,18 +3357,18 @@
<insecure_skip_verify></insecure_skip_verify> <insecure_skip_verify></insecure_skip_verify>
<shortname></shortname> <shortname></shortname>
<elasticsearch_server></elasticsearch_server> <elasticsearch_server></elasticsearch_server>
<graphite_server>192.168.2.198:2003</graphite_server> <graphite_server></graphite_server>
<graphite_prefix>PFsense</graphite_prefix> <graphite_prefix></graphite_prefix>
<graphite_timeout>10</graphite_timeout> <graphite_timeout></graphite_timeout>
<haproxy_enable></haproxy_enable> <haproxy_enable></haproxy_enable>
<haproxy_port></haproxy_port> <haproxy_port></haproxy_port>
<netstat_enable>on</netstat_enable> <netstat_enable></netstat_enable>
<ping_enable></ping_enable> <ping_enable></ping_enable>
<ping_host_1></ping_host_1> <ping_host_1></ping_host_1>
<ping_host_2></ping_host_2> <ping_host_2></ping_host_2>
<ping_host_3></ping_host_3> <ping_host_3></ping_host_3>
<ping_host_4></ping_host_4> <ping_host_4></ping_host_4>
<telegraf_raw_config>W1tvdXRwdXRzLmluZmx1eGRiX3YyXV0NCiAgdXJscyA9IFsiaHR0cDovLzE5Mi4xNjguMi4xOTg6ODA4NiJdDQogIHRva2VuID0gIlF5Vm1IMHpTTW1OanpDdzRoWnZHZVNqa3AyLVA3TG5icV93NVhFeFloLVBOM0ItYWlHNThaTDM1MkRYNTdfV0Zwa2Npc194VkpVLUlVQlBGcTNEN0V3PT0iDQogIG9yZ2FuaXphdGlvbiA9ICJQZnNlbnNlIg0KICBidWNrZXQgPSAiUEYi</telegraf_raw_config> <telegraf_raw_config>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</telegraf_raw_config>
</config> </config>
</telegraf> </telegraf>
<wireguard> <wireguard>
@ -3683,6 +3674,18 @@
<outbound_interface>lan,opt1,opt2</outbound_interface> <outbound_interface>lan,opt1,opt2</outbound_interface>
<outbound_deny_action>reject</outbound_deny_action> <outbound_deny_action>reject</outbound_deny_action>
<pass_order>order_0</pass_order> <pass_order>order_0</pass_order>
<enable_agg></enable_agg>
<enable_log></enable_log>
<ip_placeholder>127.1.7.7</ip_placeholder>
<maxmind_locale>en</maxmind_locale>
<database_cc></database_cc>
<maxmind_account>1095596</maxmind_account>
<maxmind_key>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</maxmind_key>
<asn_reporting>disabled</asn_reporting>
<enable_float>on</enable_float>
<autorule_suffix>autorule</autorule_suffix>
<killstates></killstates>
<v4suppression></v4suppression>
</config> </config>
</pfblockerngipsettings> </pfblockerngipsettings>
<pfblockerngdnsblsettings> <pfblockerngdnsblsettings>
@ -3821,6 +3824,60 @@ ZXRnYXRlLmNvbQ0K</suppression>
<pfblockerngblacklist></pfblockerngblacklist> <pfblockerngblacklist></pfblockerngblacklist>
<pfblockerngglobal></pfblockerngglobal> <pfblockerngglobal></pfblockerngglobal>
<pfblockerngsafesearch></pfblockerngsafesearch> <pfblockerngsafesearch></pfblockerngsafesearch>
<pfblockerngtopspammers>
<config>
<action>Deny_Both</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngtopspammers>
<pfblockerngafrica>
<config>
<action>Deny_Both</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngafrica>
<pfblockerngantarctica>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngantarctica>
<pfblockerngasia>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngasia>
<pfblockerngeurope>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngeurope>
<pfblockerngnorthamerica>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngnorthamerica>
<pfblockerngoceania>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngoceania>
<pfblockerngsouthamerica>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngsouthamerica>
<pfblockerngproxyandsatellite>
<config>
<action>Disabled</action>
<aliaslog>enabled</aliaslog>
</config>
</pfblockerngproxyandsatellite>
</installedpackages> </installedpackages>
<ovpnserver> <ovpnserver>
<step1> <step1>