<?xml version="1.0"?>
<m0n0wall>
    <version>1.8</version>
    <lastchange>1346897326</lastchange>
    <system>
        <hostname>m0n0wall</hostname>
        <domain>clientlan</domain>
        <dnsallowoverride/>
        <username>admin</username>
        <password>redacted</password>
        <timezone>Asia/Bangkok</timezone>
        <time-update-interval>300</time-update-interval>
        <timeservers>3.m0n0wall.pool.ntp.org</timeservers>
        <webgui>
            <protocol>http</protocol>
            <port/>
        </webgui>
    </system>
    <interfaces>
        <lan>
            <if>rl0</if>
            <ipaddr>192.168.1.1</ipaddr>
            <subnet>24</subnet>
            <media/>
            <mediaopt/>
        </lan>
        <wan>
            <if>bge0</if>
            <media/>
            <mediaopt/>
            <spoofmac/>
            <ipaddr>dhcp</ipaddr>
            <dhcphostname/>
        </wan>
        <opt1>
            <if>rl1</if>
            <descr>DMZ</descr>
            <ipaddr>10.198.250.151</ipaddr>
            <spoofmac>00:1E:EC:72:ED:92</spoofmac>
            <subnet>16</subnet>
            <gateway>10.198.0.1</gateway>
            <bridge/>
            <enable/>
        </opt1>
    </interfaces>
    <staticroutes/>
    <pppoe/>
    <pptp/>
    <dyndns>
        <type>dyndns</type>
        <username/>
        <password/>
        <host/>
        <mx/>
        <server/>
        <port/>
    </dyndns>
    <dnsupdate/>
    <dhcpd>
        <lan>
            <enable/>
            <range>
                <from>192.168.1.101</from>
                <to>192.168.1.200</to>
            </range>
        </lan>
    </dhcpd>
    <pptpd>
        <mode/>
        <nunits>16</nunits>
        <redir/>
        <localip/>
        <remoteip/>
    </pptpd>
    <dnsmasq>
        <enable/>
    </dnsmasq>
    <snmpd>
        <syslocation/>
        <syscontact/>
        <rocommunity>public</rocommunity>
    </snmpd>
    <diag/>
    <bridge/>
    <syslog/>
    <nat>
        <advancedoutbound>
            <rule>
                <source>
                    <network>192.168.1.0/24</network>
                </source>
                <descr>NAT to client LAN</descr>
                <target/>
                <interface>opt1</interface>
                <destination>
                    <network>10.0.0.0/8</network>
                </destination>
            </rule>
        </advancedoutbound>
        <rule>
            <protocol>tcp</protocol>
            <external-port>80</external-port>
            <target>192.168.1.50</target>
            <local-port>80</local-port>
            <interface>opt1</interface>
            <descr>HTTP NAT for LesPaul</descr>
        </rule>
    </nat>
    <filter>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <protocol>icmp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <any/>
            </destination>
            <descr>Allow ping on DMZ</descr>
        </rule>
        <rule>
            <interface>opt1</interface>
            <protocol>tcp</protocol>
            <source>
                <any/>
            </source>
            <destination>
                <address>192.168.1.50</address>
                <port>80</port>
            </destination>
            <descr>NAT HTTP NAT for LesPaul</descr>
        </rule>
        <rule>
            <type>pass</type>
            <interface>opt1</interface>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <network>opt1</network>
            </destination>
            <descr/>
        </rule>
        <rule>
            <type>pass</type>
            <descr>Default LAN -&gt; any</descr>
            <interface>lan</interface>
            <source>
                <network>lan</network>
            </source>
            <destination>
                <any/>
            </destination>
        </rule>
        <rule>
            <type>pass</type>
            <descr>Default IPsec VPN</descr>
            <interface>ipsec</interface>
            <source>
                <any/>
            </source>
            <destination>
                <any/>
            </destination>
        </rule>
    </filter>
    <shaper/>
    <ipsec/>
    <aliases/>
    <proxyarp/>
    <wol/>
</m0n0wall>