<?xml version="1.0" ?>
- <m0n0wall>
<version>1.8</version>
<lastchange>1264939698</lastchange>
- <system>
<hostname>newhaven-monowall</hostname>
<domain>newhaven.joy.cn</domain>
<dnsallowoverride />
<username>admin</username>
<password>$1$y1qz4xHA$EbFIgBIa0iPPJqH8zJ32P0</password>
<timezone>Asia/Shanghai</timezone>
<time-update-interval>300</time-update-interval>
<timeservers>0.m0n0wall.pool.ntp.org</timeservers>
- <webgui>
<protocol>http</protocol>
<port />
</webgui>
<notes />
<dnsserver>202.96.104.19</dnsserver>
<dnsserver>202.96.102.3</dnsserver>
<dnsserver>8.8.8.8</dnsserver>
</system>
- <interfaces>
- <lan>
<if>rl0</if>
<ipaddr>192.168.0.1</ipaddr>
<subnet>24</subnet>
<media />
<mediaopt />
</lan>
- <wan>
<if>rl1</if>
<media />
<mediaopt />
<spoofmac />
<ipaddr>192.168.1.254</ipaddr>
<subnet>24</subnet>
<gateway>192.168.1.2</gateway>
</wan>
</interfaces>
<staticroutes />
<pppoe />
<pptp />
- <dyndns>
<type>dyndns</type>
<username>newhaven</username>
<password>abcdqwexlj</password>
<host>remoter-monitor</host>
<mx />
<server />
<port>12580</port>
</dyndns>
- <dnsupdate>
<host />
<ttl>60</ttl>
<keyname />
<keydata />
</dnsupdate>
- <dhcpd>
- <lan>
- <range>
<from>192.168.0.100</from>
<to>192.168.0.199</to>
</range>
<defaultleasetime />
<maxleasetime />
<enable />
<next-server />
<filename />
<denyunknown />
</lan>
</dhcpd>
- <pptpd>
<mode />
<nunits>16</nunits>
<redir />
<localip />
<remoteip />
</pptpd>
- <dnsmasq>
<enable />
<allservers />
- <hosts>
<host>www</host>
<domain>joy.com</domain>
<ip>192.168.0.110</ip>
<descr>web server</descr>
</hosts>
<regdhcp />
</dnsmasq>
- <snmpd>
<syslocation />
<syscontact />
<rocommunity>public</rocommunity>
</snmpd>
<diag />
<bridge />
<syslog />
- <nat>
- <rule>
<protocol>tcp</protocol>
<external-port>80</external-port>
<target>192.168.0.1</target>
<local-port>80</local-port>
<interface>wan</interface>
<descr>router manager</descr>
</rule>
- <rule>
<protocol>tcp</protocol>
<external-port>7506</external-port>
<target>192.168.0.100</target>
<local-port>7506</local-port>
<interface>wan</interface>
<descr>VNC SERVER</descr>
</rule>
<advancedoutbound />
</nat>
- <filter>
- <rule>
<interface>wan</interface>
<protocol>tcp</protocol>
- <source>
<any />
</source>
- <destination>
<address>192.168.0.1</address>
<port>80</port>
</destination>
<descr>NAT router manager</descr>
</rule>
- <rule>
<interface>wan</interface>
<protocol>tcp</protocol>
- <source>
<any />
</source>
- <destination>
<address>192.168.0.100</address>
<port>7506</port>
</destination>
<descr>NAT VNC SERVER</descr>
</rule>
- <rule>
<type>pass</type>
<descr>Default LAN -> any</descr>
<interface>lan</interface>
- <source>
<network>lan</network>
</source>
- <destination>
<any />
</destination>
</rule>
- <rule>
<type>pass</type>
<descr>Default IPsec VPN</descr>
<interface>ipsec</interface>
- <source>
<any />
</source>
- <destination>
<any />
</destination>
</rule>
</filter>
<ipsec />
<aliases />
<proxyarp />
<wol />
- <shaper>
- <magic>
<maxup>512</maxup>
<maxdown>2048</maxdown>
</magic>
- <pipe>
<bandwidth>720</bandwidth>
<mask>destination</mask>
<descr>download limitaion(90KBits)</descr>
</pipe>
- <pipe>
<bandwidth>200</bandwidth>
<mask>source</mask>
<descr>upload limitaion(25KBits)</descr>
</pipe>
- <pipe>
<bandwidth>2000</bandwidth>
<mask>destination</mask>
<descr>server download spd limitation</descr>
</pipe>
- <pipe>
<bandwidth>200</bandwidth>
<mask>source</mask>
<descr>server upload spd limitaion</descr>
</pipe>
- <queue>
<targetpipe>0</targetpipe>
<weight>15</weight>
<mask>destination</mask>
<descr>0-799 download length of ip packet</descr>
</queue>
- <queue>
<targetpipe>0</targetpipe>
<weight>35</weight>
<mask>destination</mask>
<descr>800-1199 download length of ip packet</descr>
</queue>
- <queue>
<targetpipe>0</targetpipe>
<weight>50</weight>
<mask>destination</mask>
<descr>1200-1500 download length of ip packet</descr>
</queue>
- <queue>
<targetpipe>1</targetpipe>
<weight>15</weight>
<mask>source</mask>
<descr>0-799 upload length of ip packet</descr>
</queue>
- <queue>
<targetpipe>1</targetpipe>
<weight>35</weight>
<mask>source</mask>
<descr>800-1199 upload length of ip packet</descr>
</queue>
- <queue>
<targetpipe>1</targetpipe>
<weight>50</weight>
<mask>source</mask>
<descr>1200-1500 upload length of ip packet</descr>
</queue>
- <rule>
<interface>wan</interface>
- <source>
<address>192.168.0.100</address>
</source>
- <destination>
<any />
</destination>
<direction>out</direction>
<iplen />
<iptos />
<tcpflags>ack</tcpflags>
<descr>server upload spd limitaion</descr>
<targetpipe>3</targetpipe>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<any />
</source>
- <destination>
<address>192.168.0.100</address>
</destination>
<direction>in</direction>
<iplen />
<iptos />
<tcpflags />
<descr>server download limitaion</descr>
<targetpipe>2</targetpipe>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<any />
</source>
- <destination>
<network>lan</network>
</destination>
<direction>in</direction>
<iplen>0-799</iplen>
<iptos />
<tcpflags>ack</tcpflags>
<descr>0-799 download ip packets</descr>
<targetqueue>0</targetqueue>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<any />
</source>
- <destination>
<network>lan</network>
</destination>
<direction>in</direction>
<iplen>800-1199</iplen>
<iptos />
<tcpflags />
<descr>800-1199 download ip packets</descr>
<targetqueue>1</targetqueue>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<any />
</source>
- <destination>
<network>lan</network>
</destination>
<direction>in</direction>
<iplen>1200-1500</iplen>
<iptos />
<tcpflags />
<descr>1200-1500 download ip packets</descr>
<targetqueue>2</targetqueue>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<network>lan</network>
</source>
- <destination>
<any />
</destination>
<direction>out</direction>
<iplen>0-799</iplen>
<iptos />
<tcpflags />
<descr>0-799 upload ip packets</descr>
<targetqueue>3</targetqueue>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<network>lan</network>
</source>
- <destination>
<any />
</destination>
<direction>out</direction>
<iplen>800-1199</iplen>
<iptos />
<tcpflags />
<descr>800-1199 upload ip packets</descr>
<targetqueue>4</targetqueue>
</rule>
- <rule>
<interface>wan</interface>
- <source>
<network>lan</network>
</source>
- <destination>
<any />
</destination>
<direction>out</direction>
<iplen>1200-1500</iplen>
<iptos />
<tcpflags />
<descr>1200-1500 upload ip packets</descr>
<targetqueue>5</targetqueue>
</rule>
<enable />
</shaper>
</m0n0wall>
分享到:
相关推荐
MONOWALL简明配置手册.pdf
软防火墙monowall防火墙视频(安装+使用+虚拟机文件) generic-pc-1.8.1.iso
MONOWALL1.3简体中文汉化汉化版
虚拟机安装monowall防火墙.pdf
MONOWALL日志文件软件,日志服务器WallWatcher
虚拟机安装monowall防火墙归纳.pdf
- **CD/floppy设定**:monowall可以从CD启动并运行,同时使用软盘保存配置文件。但由于软盘的可靠性和稳定性问题,不建议在生产环境中使用。 - **硬盘设定**:推荐使用硬盘安装monowall(最小8MB空间,通常任何IDE...
MONOWALL优秀插件整合版1.231SC
monowall防火墙操作系统镜像(GPL)
集合:panabit ARP绑定 回流 动态域名3322 等等 特别在流控方面 网吧版 已在 5个网吧测试 10M 带 200台电脑不卡 30M 带 300台不卡机 。...不过超强MONOWALL 代号“永恒小猪版”不用panabit一样的牛。
MONOWALL 安装教程介绍软路由的安装与设置
防火墙Monowall双线教程,ROUTEROS双线教程,流量管理等
[IMG]monowall1.32 集成pppoe_server_part2
比较稳定的软路由,找了很久才找到的,喜欢的朋友可以下载来试试。
免费的专业级防火墙,很小但很强大一试便知。
虚拟机安装monowall防火墙.rar