      </acls>
      <acls>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <action>alert</action>
        <active_interface/>
      <activeTimeout>1800</activeTimeout>
        <address/>
        <address/>
        <address/>
        <address/>
        <address/>
      </advanced>
      <advanced>
      <adv_dhcp_config_advanced/>
      <adv_dhcp_config_file_override/>
      <adv_dhcp_config_file_override_path/>
      <adv_dhcp_option_modifiers/>
      <adv_dhcp_pt_backoff_cutoff/>
      <adv_dhcp_pt_initial_interval/>
      <adv_dhcp_pt_reboot/>
      <adv_dhcp_pt_retry/>
      <adv_dhcp_pt_select_timeout/>
      <adv_dhcp_pt_timeout/>
      <adv_dhcp_pt_values>SavedCfg</adv_dhcp_pt_values>
      <adv_dhcp_request_options/>
      <adv_dhcp_required_options/>
      <adv_dhcp_send_options/>
        <aggressivensec>1</aggressivensec>
      </alert>
        <AlertLogrotate>W0D23</AlertLogrotate>
        <AlertSaveLogs>4</AlertSaveLogs>
      <alert uuid="15f1e9ca-5dd5-4b20-b595-b6b4f82245d0">
      </Alias>
      <alias-address/>
        <aliases/>
      <aliases/>
      <alias-subnet>32</alias-subnet>
      <Alias version="1.0.1">
        and for the sender directly reachable, route and next hop is known.</descr>
        <any/>
        <any/>
        <any>1</any>
        <any>1</any>
        <any>1</any>
        <any>1</any>
        <any>1</any>
        as part of the standard FreeBSD core system.</descr>
        as part of the standard FreeBSD core system.</descr>
        <blocklists/>
    </bogons>
    <bogons>
    <bridged/>
  </bridges>
  <bridges>
  <ca/>
        <cacheflush/>
        <cachemaxnegativettl/>
        <cachemaxttl/>
        <cacheminttl/>
    </captiveportal>
    <captiveportal version="1.0.2">
      </capture>
      <capture>
    <caref/>
    <caref/>
        <categories/>
      </Category>
      <Category version="1.0.0">
  </cert>
  </cert>
  <cert uuid="547102e9-23ba-48b8-8af8-64be61049e96">
  <cert uuid="cad18e13-92c5-48b6-9b44-ad2e5dcc799e">
      <children/>
      <ciphers/>
      </client>
        <clients/>
      <client version="1.0.0">
    <clone/>
      </collect>
      <collect>
    <column_count>2</column_count>
      <compression/>
        <condition>changed status</condition>
        <condition>cpu usage is greater than 75%</condition>
        <condition>failed link</condition>
        <condition>failed ping</condition>
        <condition>loadavg (15min) is greater than 2</condition>
        <condition>loadavg (1min) is greater than 4</condition>
        <condition>loadavg (5min) is greater than 3</condition>
        <condition>memory usage is greater than 75%</condition>
        <condition>saturation is greater than 75%</condition>
        <condition>space usage is greater than 75%</condition>
        <condition>status != 0</condition>
      <Connections/>
      </created>
      </created>
      </created>
      </created>
      <created>
      <created>
      <created>
      <created>
    </cron>
    <cron version="1.0.4">
    <crt>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</crt>
    <crt>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</crt>
    <csr/>
    <csr/>
      </ctrl_agent>
      <ctrl_agent version="0.0.1">
        <data_length/>
        <default_action>allow</default_action>
        <defaultgw>1</defaultgw>
        <defaultPacketSize/>
        <depends/>
        <depends/>
        <depends/>
        <depends/>
      <descr/>
      <descr>Allow ping</descr>
      <descr>Allow unprivileged access to tap(4) device nodes</descr>
      <descr>Default allow LAN IPv6 to any rule</descr>
      <descr>Default allow LAN to any rule</descr>
      <descr>Disable CTRL+ALT+Delete reboot from keyboard.</descr>
      <descr>Disable Indirect Branch Restricted Speculation (Spectre V2 mitigation)</descr>
      <descr>Do not delay ACK to try and piggyback it onto a data packet</descr>
      <descr>Do not send ICMP port unreachable messages for closed UDP ports</descr>
      <descr>Drop packets to closed TCP ports without returning a RST</descr>
      <descr>Drop SYN-FIN packets (breaks RFC1379, but nobody uses it anyway)</descr>
      <descr>Enable/disable sending of ICMP redirects in response to IP packets for which a better,
      <descr>Enable privacy settings for IPv6 (RFC 4941)</descr>
      <descr>Enable sending IPv6 redirects</descr>
      <descr>Enable TCP extended debugging</descr>
      <descr>Generate SYN cookies for outbound SYN-ACK packets</descr>
      <descr>Handling of non-IP packets which are not passed to pfil (see if_bridge(4))</descr>
      <descr>Hide processes running as other groups</descr>
      <descr>Hide processes running as other users</descr>
      <descr>Increase UFS read-ahead speeds to match the state of hard drives and NCQ.</descr>
        <descr>Interface WAN Gateway</descr>
        <description/>
        <description/>
        <description/>
        <description/>
        <description/>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
        <description>/firewall_rules_edit.php made changes</description>
    <description>/interfaces.php made changes</description>
      <description>System Administrators</description>
      <descr>Loopback</descr>
      <descr>Maximum incoming/outgoing TCP datagram size (receive)</descr>
      <descr>Maximum incoming/outgoing TCP datagram size (send)</descr>
      <descr>Maximum outgoing UDP datagram size</descr>
      <descr>Maximum outgoing UDP datagram size</descr>
      <descr>Maximum socket buffer size</descr>
      <descr>Page Table Isolation (Meltdown mitigation, requires reboot.)</descr>
      <descr>Prefer privacy addresses and use them over the normal addresses</descr>
      <descr>Randomize PID's (see src/sys/kern/kern_fork.c: sysctl_kern_randompid())</descr>
      <descr>Randomize the ID field in IP packets</descr>
      <descr>Set ICMP Limits</descr>
      <descr>Set the ephemeral port range to be lower.</descr>
      <descr>Set to 0 to disable filtering on the incoming and outgoing member interfaces.</descr>
      <descr>Set to 1 to additionally filter on the physical interface for locally destined packets</descr>
      <descr>Set to 1 to enable filtering on the bridge interface</descr>
      <descr>Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
      <descr>Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
      <descr>System Administrator</descr>
      <descr>TCP Offload Engine</descr>
      <descr>This option turns off the logging of redirect packets because there is no limit and this could fill
      <descr>UDP Checksums</descr>
    <descr>Web GUI TLS certificate</descr>
    <descr>Web GUI TLS certificate</descr>
      </destination>
      </destination>
      </destination>
      </destination>
      </destination>
      </destination>
      <destination>
      <destination>
      <destination>
      <destination>
      <destination>
      <destination>
      <destinations/>
        </detect>
        <detect>
      </dhcp4>
      <dhcp4 version="1.0.0">
  </dhcpd>
  <dhcpd>
  <dhcpdv6/>
      <dhcphostname/>
      <dhcprejectfrom/>
    <DHCRelay version="1.0.1"/>
      <direction>in</direction>
      <direction>in</direction>
      <direction>in</direction>
      <direction>in</direction>
    <disablechecksumoffloading>1</disablechecksumoffloading>
    <disableconsolemenu>1</disableconsolemenu>
        <disabled>0</disabled>
    <disablelargereceiveoffloading>1</disablelargereceiveoffloading>
    <disablenatreflection>yes</disablenatreflection>
    <disablepreempt>0</disablepreempt>
    <disablesegmentationoffloading>1</disablesegmentationoffloading>
    <disablevlanhwfilter>1</disablevlanhwfilter>
    <disconnectppps>0</disconnectppps>
        <dns64/>
        <dns64prefix/>
    <dnsallowoverride>1</dnsallowoverride>
      </dnsbl>
      <dnsbl>
        <dnsserver/>
    <dnsserver>192.168.5.1</dnsserver>
    <domain>localdomain</domain>
      <domains/>
      <dots/>
        <egress_only/>
      <enable/>
    <enable/>
        <enable>0</enable>
      <enable>1</enable>
      <enable>1</enable>
      <enable>1</enable>
        <enabled/>
        <enabled/>
          <enabled>0</enabled>
          <enabled>0</enabled>
          <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>0</enabled>
        <enabled>1</enabled>
        <enabled>1</enabled>
        <enabled>1</enabled>
        <enabled>1</enabled>
      <enabled>enabled</enabled>
        <enable_wpad/>
        <eventqueuePath/>
        <eventqueueSlots/>
        <events/>
        <extendedstatistics/>
        <fargw>0</fargw>
      <files/>
      <fileTags/>
  </filter>
  <filter>
      </Filter>
      <Filter version="1.0.4">
    </Firewall>
    <Firewall>
    </firmware>
    <firmware version="1.0.1">
      <flavour/>
        <force_down/>
        <format/>
      </forwarding>
      <forwarding>
        <from>10.100.8.10</from>
          <fwrules>1</fwrules>
        <gateway>172.17.0.1</gateway>
      </gateway_item>
      <gateway_item uuid="a6ea102d-68bb-430f-af8b-269d52498fe1">
    </Gateways>
    <Gateways version="1.0.0">
        </general>
        </general>
        <general>
        <general>
      </general>
      </general>
      </general>
      </general>
      </general>
      </general>
      <general>
      <general>
      <general>
      <general>
      <general>
      <general version="0.0.1">
        </geoip>
        <geoip>
      <gid>1999</gid>
    <gif/>
  </gifs>
  <gifs version="1.0.0">
    <gre/>
  </gres>
  <gres version="1.0.0">
    </group>
    <group>
      <group>admins</group>
      <groupname>admins</groupname>
        </ha>
        <ha>
        <ha_peers/>
  </hasync>
  <hasync version="1.0.0">
        <hideidentity/>
        <hideversion/>
        <homenet>192.168.0.0/16,10.0.0.0/8,172.16.0.0/12</homenet>
    <hostname>OPNsense</hostname>
        <hostname>rtx4090</hostname>
      <hosts/>
        <httpdAllow/>
        <httpdEnabled>0</httpdEnabled>
        <httpdPassword/>
        <httpdPort>2812</httpdPort>
        <httpdUsername>root</httpdUsername>
          <http_host>127.0.0.1</http_host>
          <http_port>8000</http_port>
    </IDS>
    <IDS version="1.0.9">
  <ifgroups version="1.0.0"/>
      <if>le0</if>
      <if>le1</if>
      <if>lo0</if>
      <inactiveTimeout>15</inactiveTimeout>
        <incomingnumtcp/>
        <infracachenumhosts/>
        <infrahostttl/>
        <infrakeepprobing/>
        <insecuredomain/>
      <Instances/>
        <interface/>
        <interface/>
        <interface/>
        <interface/>
      <interface>lan</interface>
      <interface>lan</interface>
          <interfaces/>
        <interfaces/>
      <interfaces/>
      <interfaces/>
  </interfaces>
  <interfaces>
    </Interfaces>
    <Interfaces>
        <interfaces>wan</interfaces>
        <interface>wan</interface>
      <interface>wan</interface>
      <interface>wan</interface>
      <interface>wan</interface>
      <interface>wan</interface>
      <internal_dynamic>1</internal_dynamic>
        <interval/>
        <interval>120</interval>
      <interval>monthly</interval>
        <ipaddr>10.100.8.15</ipaddr>
      <ipaddr>10.100.8.1</ipaddr>
      <ipaddr>127.0.0.1</ipaddr>
      <ipaddr>dhcp</ipaddr>
      <ipaddrv6>::1</ipaddrv6>
      <ipaddrv6>track6</ipaddrv6>
      <ipprotocol>inet6</ipprotocol>
        <ipprotocol>inet</ipprotocol>
      <ipprotocol>inet</ipprotocol>
      <ipprotocol>inet</ipprotocol>
      <ipprotocol>inet</ipprotocol>
      <ipprotocol>inet</ipprotocol>
      <ipprotocol>inet</ipprotocol>
        <ips>0</ips>
    </IPsec>
    <IPsec version="1.0.1">
    <ipv6allow>1</ipv6allow>
        It can also be used to probe for information about your internal networks. These functions come enabled
        It can also be used to probe for information about your internal networks. These functions come enabled
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    </item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
    <item>
      <jobs/>
        <jostletimeout/>
    </Kea>
    <Kea>
      <kex/>
      <keyPairs/>
      <keys/>
      <keysig/>
    <lagg/>
  </laggs>
  <laggs version="1.0.0">
    </lan>
    </lan>
    <lan>
    <lan>
    <language>en_US</language>
        <latencyhigh/>
        <latencylow/>
    <lb_use_sticky>1</lb_use_sticky>
        <lists/>
    </lo0>
    <lo0>
      <locals/>
        <local_zone_type>transparent</local_zone_type>
        <logfile/>
        <loglocal>1</loglocal>
        <loglocalactions/>
        <LogPayload>0</LogPayload>
        <logqueries/>
        <logreplies/>
        <logservfail/>
        <logtagqueryreply/>
        <logverbosity>1</logverbosity>
      <loopbacks version="1.0.0"/>
        <losshigh/>
        <loss_interval/>
        <losslow/>
      </Lvtemplate>
      <Lvtemplate version="0.0.1">
        <mac>d8:5e:d3:e7:2c:8c</mac>
      <macs/>
        <mailserver>127.0.0.1</mailserver>
        <match/>
        <match/>
        <match/>
        <match/>
        <maxfilesize/>
        <maxpreserve>31</maxpreserve>
      <media/>
      <mediaopt/>
      <member>0</member>
      <mirror/>
        <mmonitRegisterCredentials>1</mmonitRegisterCredentials>
        <mmonitTimeout>5</mmonitTimeout>
        <mmonitUrl/>
      <mode>automatic</mode>
    </monit>
        <monitor/>
        <monitor_disable>1</monitor_disable>
        <monitor_noroute/>
    <monit version="1.0.13">
        <MPMAlgo/>
        <msgcachesize/>
        <name>$HOST</name>
      <name>admins</name>
        <name>carp_status_change</name>
        <name>ChangedStatus</name>
        <name>CPUUsage</name>
        <name>gateway_alert</name>
        <name>LoadAvg15</name>
        <name>LoadAvg1</name>
        <name>LoadAvg5</name>
        <name>MemoryUsage</name>
        <name>NetworkLink</name>
        <name>NetworkSaturation</name>
        <name>NonZeroStatus</name>
        <name>Ping</name>
        <name>RootFs</name>
      <name>root</name>
        <name>SpaceUsage</name>
        <name>WAN_GW</name>
  </nat>
  <nat>
      <neighbors version="1.0.0"/>
    </Netflow>
    <netflowbackup>-1</netflowbackup>
    <Netflow version="1.0.1">
        <network>lan</network>
        <network>lan</network>
        <network>(self)</network>
        <network>wanip</network>
        <network>wanip</network>
    <nextgid>2000</nextgid>
    <nextuid>2000</nextuid>
        <noarecords/>
      <noauto>1</noauto>
        <noreglladdr6/>
        <noregrecords/>
        <noton>0</noton>
        <npt/>
  </ntpd>
  <ntpd>
        <ntpserver/>
        <numqueriesperthread/>
        <nxdomain/>
        <onetoone/>
  <openvpn/>
    </OpenVPN>
    </OpenVPNExport>
    <OpenVPNExport version="0.0.1">
    <OpenVPN version="1.0.0">
</opnsense>
<opnsense>
  </OPNsense>
  <OPNsense>
    <optimization>normal</optimization>
    </outbound>
    <outbound>
        <outgoing_interface/>
        <outgoingnumtcp/>
        <outgoingrange/>
      <Overwrites/>
        <password/>
    <password/>
      <password>$2y$10$YRVoF4SgskIsrXOvOQjGieB9XqHPRra9R7d80B3BZdbY/j21TwBfS</password>
      <passwordauth>1</passwordauth>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path/>
        <path>/</path>
        <path>/usr/local/opnsense/scripts/OPNsense/Monit/carp_status</path>
        <path>/usr/local/opnsense/scripts/OPNsense/Monit/gateway_alert</path>
      <permitrootlogin>1</permitrootlogin>
    <pf_share_forward>1</pf_share_forward>
    <pfsyncenabled>0</pfsyncenabled>
    <pfsyncinterface>lan</pfsyncinterface>
    <pfsyncpeerip/>
    <pfsyncversion>1400</pfsyncversion>
        <pidfile/>
        <pidfile/>
        <pidfile/>
        <pidfile/>
      <pipes/>
      <plugins/>
      <policies/>
        <polltime/>
        <polltime/>
        <polltime/>
        <polltime/>
      <Pools/>
      <port/>
        <port>22</port>
        <port>25</port>
        <port>443</port>
        <port>53</port>
        <port>80</port>
    <powerd_ac_mode>hadp</powerd_ac_mode>
    <powerd_battery_mode>hadp</powerd_battery_mode>
    <powerd_normal_mode>hadp</powerd_normal_mode>
    <ppp/>
  </ppps>
  <ppps>
    <prefer>0.opnsense.pool.ntp.org</prefer>
        <prefetch/>
        <prefetchkey/>
      <preSharedKeys/>
    <primaryconsole>video</primaryconsole>
        <priority>255</priority>
        <privateaddress>0.0.0.0/8,10.0.0.0/8,100.64.0.0/10,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,198.18.0.0/15,198.51.100.0/24,203.0.113.0/24,233.252.0.0/24,::1/128,2001:db8::/32,fc00::/8,fd00::/8,fe80::/10</privateaddress>
        <privatedomain/>
      <priv>page-all</priv>
          <Profile/>
        <promisc>0</promisc>
      <protocol>https</protocol>
      <protocol>icmp</protocol>
      <protocol>tcp</protocol>
      <protocol>tcp</protocol>
      <protocol>tcp/udp</protocol>
    <prv>[encoded data, 4364 characters]</prv>
    <prv>[encoded data, 4364 characters]</prv>
        <qnameminstrict/>
      <queues/>
      <quick>1</quick>
      <quick>1</quick>
      <quick>1</quick>
      <quick>1</quick>
      </range>
      <range>
      <reboot/>
        <recipient>root@localhost.local</recipient>
    <refid>6734d13fa9e4a</refid>
    <refid>6734d6c82dc59</refid>
        <regdhcp/>
        <regdhcpdomain/>
        <regdhcpstatic/>
        <reminder/>
      <remotes/>
        <reservations/>
  </revision>
  <revision>
    <rocommunity>public</rocommunity>
    <route/>
  </rrd>
  <rrd>
    <rrdbackup>-1</rrdbackup>
        <rrsetcachesize/>
    </rule>
    </rule>
    </rule>
    </rule>
    </rule>
    </rule>
        <rules/>
      <rules/>
      <rules/>
    <rule uuid="0465308d-8605-466c-bcb4-95eeb989251a">
    <rule uuid="2df05591-13e7-4d91-a1b8-d25e338ada5f">
    <rule uuid="4a5e7b65-0d7f-4452-8a29-2ec61a47ec19">
    <rule uuid="b21f808a-6a4a-4cd6-9a83-1660cc8ea58b">
    <rule uuid="f2ee612c-c290-4445-8045-df82a86db0e5">
    <rule uuid="f79eded0-3c11-4f57-9aaa-55d4888589fa">
        <safesearch/>
      <scope>system</scope>
      <scope>system</scope>
    <secondaryconsole>serial</secondaryconsole>
    <sequence>system_information-container:00000000-col3:show,services_status-container:00000001-col4:show,gateways-container:00000002-col4:show,interface_list-container:00000003-col4:show</sequence>
    <serialspeed>115200</serialspeed>
        <serveexpired/>
        <serveexpiredclienttimeout/>
        <serveexpiredreplyttl/>
        <serveexpiredttl/>
        <serveexpiredttlreset/>
      </server>
        <servers/>
      <servers/>
      <server version="1.0.0">
      </service>
      </service>
      </service>
      </service>
      <service uuid="7513f341-7d21-4f11-903f-30d07b3aa41e">
      <service uuid="c1e99556-91f5-4dbf-81d7-7915a3213de9">
      <service uuid="dca8a81f-d389-4baa-b477-8b348194fd25">
      <service uuid="f99ada79-ba1a-4ee1-81f1-ef570e8e5ea9">
        <snatrules/>
  </snmpd>
  <snmpd>
      </source>
      </source>
      </source>
      </source>
      </source>
      </source>
      <source>
      <source>
      <source>
      <source>
      <source>
      <source>
      <SPDs/>
      <spoofmac/>
    </ssh>
    <ssh>
        <ssl>0</ssl>
      <ssl-certref>6734d6c82dc59</ssl-certref>
      <ssl-ciphers/>
        <sslverify>1</sslverify>
        <sslversion>auto</sslversion>
        <start/>
        <start/>
        <start/>
        <start/>
        <startdelay>120</startdelay>
        <starttimeout>30</starttimeout>
        <starttimeout>30</starttimeout>
        <starttimeout>30</starttimeout>
        <starttimeout>30</starttimeout>
        <statefile/>
      <statetype>keep state</statetype>
      <statetype>keep state</statetype>
      <statetype>keep state</statetype>
      <statetype>keep state</statetype>
      <StaticKeys/>
      </staticmap>
      <staticmap>
  </staticroutes>
  <staticroutes version="1.0.0">
        <stats/>
        <stop/>
        <stop/>
        <stop/>
        <stop/>
      <subnet>24</subnet>
      <subnet>8</subnet>
        <subnets/>
      <subnetv6>128</subnetv6>
      <subnetv6>64</subnetv6>
      <subscription/>
    </Swanctl>
    <Swanctl version="1.0.0">
    <synchronizetoip/>
    <syncitems/>
    <syscontact/>
  </sysctl>
  <sysctl>
    <syslocation/>
  <syslog/>
    </Syslog>
        <syslog>0</syslog>
        <syslog_eve>0</syslog_eve>
    <Syslog version="1.0.2">
  </system>
  <system>
        <targets/>
        <templates/>
      <templates/>
      </test>
      </test>
      </test>
      </test>
      </test>
      </test>
      </test>
      </test>
      </test>
      </test>
      </test>
        <tests>865105a2-cbea-4a01-9979-c67818da9d99</tests>
        <tests>91b4e409-211b-49d5-9fa3-dc9054106646,cbe9cb72-e8c2-4740-990c-abcc486b0654,c0708923-88de-4178-abdd-819737440ce0,e887125d-c5d2-45e6-b40d-2c400d5449d1</tests>
        <tests>cc3684f2-701e-4de4-883d-803e08cf47b6</tests>
        <tests>f2d734cb-2a0e-4375-9460-11bdd5b20503</tests>
      <test uuid="16186b38-0e13-4cc3-ad18-ccc3fcc91837">
      <test uuid="69117d4d-8c41-4712-97c0-87b4fa7c9837">
      <test uuid="865105a2-cbea-4a01-9979-c67818da9d99">
      <test uuid="91b4e409-211b-49d5-9fa3-dc9054106646">
      <test uuid="c0708923-88de-4178-abdd-819737440ce0">
      <test uuid="c34aab30-9194-4667-b516-004b9c90c1c0">
      <test uuid="cbe9cb72-e8c2-4740-990c-abcc486b0654">
      <test uuid="cc3684f2-701e-4de4-883d-803e08cf47b6">
      <test uuid="e887125d-c5d2-45e6-b40d-2c400d5449d1">
      <test uuid="ea6b821c-4f30-455b-bd5b-23a6f0c20554">
      <test uuid="f2d734cb-2a0e-4375-9460-11bdd5b20503">
  <theme>opnsense</theme>
          <this_server_name/>
        <time>1731518072.7612</time>
        <time>1731518072.7612</time>
        <time>1731518084.0639</time>
        <time>1731518084.0639</time>
        <time>1731518114.2801</time>
        <time>1731518114.2801</time>
        <time>1731518311.7033</time>
        <time>1731518356.7559</time>
    <time>1731534516.7156</time>
        <timeout>300</timeout>
        <timeout>300</timeout>
        <timeout>300</timeout>
        <timeout>300</timeout>
        <time_period/>
    <timeservers>0.opnsense.pool.ntp.org 1.opnsense.pool.ntp.org 2.opnsense.pool.ntp.org 3.opnsense.pool.ntp.org</timeservers>
    <timezone>Etc/UTC</timezone>
        <to>10.100.8.245</to>
          <toclient_groups/>
          <toserver_groups/>
      <track6-interface>wan</track6-interface>
      <track6-prefix-id>0</track6-prefix-id>
    </TrafficShaper>
    <TrafficShaper version="1.0.3">
      <tunable>hw.ibrs_disable</tunable>
      <tunable>hw.syscons.kbd_reboot</tunable>
      <tunable>kern.ipc.maxsockbuf</tunable>
      <tunable>kern.randompid</tunable>
      <tunable>net.inet6.ip6.prefer_tempaddr</tunable>
      <tunable>net.inet6.ip6.redirect</tunable>
      <tunable>net.inet6.ip6.use_tempaddr</tunable>
      <tunable>net.inet.icmp.icmplim</tunable>
      <tunable>net.inet.icmp.log_redirect</tunable>
      <tunable>net.inet.ip.accept_sourceroute</tunable>
      <tunable>net.inet.ip.portrange.first</tunable>
      <tunable>net.inet.ip.random_id</tunable>
      <tunable>net.inet.ip.redirect</tunable>
      <tunable>net.inet.ip.sourceroute</tunable>
      <tunable>net.inet.tcp.blackhole</tunable>
      <tunable>net.inet.tcp.delayed_ack</tunable>
      <tunable>net.inet.tcp.drop_synfin</tunable>
      <tunable>net.inet.tcp.log_debug</tunable>
      <tunable>net.inet.tcp.recvspace</tunable>
      <tunable>net.inet.tcp.sendspace</tunable>
      <tunable>net.inet.tcp.syncookies</tunable>
      <tunable>net.inet.tcp.tso</tunable>
      <tunable>net.inet.udp.blackhole</tunable>
      <tunable>net.inet.udp.checksum</tunable>
      <tunable>net.inet.udp.maxdgram</tunable>
      <tunable>net.link.bridge.pfil_bridge</tunable>
      <tunable>net.link.bridge.pfil_local_phys</tunable>
      <tunable>net.link.bridge.pfil_member</tunable>
      <tunable>net.link.bridge.pfil_onlyip</tunable>
      <tunable>net.link.tap.user_open</tunable>
      <tunable>net.local.dgram.maxdgram</tunable>
      <tunable>security.bsd.see_other_gids</tunable>
      <tunable>security.bsd.see_other_uids</tunable>
      <tunable>vfs.read_max</tunable>
      <tunable>vm.pmap.pti</tunable>
        <txtsupport/>
        <type/>
      <type/>
        <type>custom</type>
        <type>custom</type>
        <type>filesystem</type>
        <type>NetworkInterface</type>
        <type>NetworkInterface</type>
        <type>NetworkPing</type>
      <type>none</type>
      <type>pass</type>
      <type>pass</type>
      <type>pass</type>
      <type>pass</type>
      <type>pass</type>
      <type>pass</type>
        <type>ProgramStatus</type>
        <type>ProgramStatus</type>
        <type>SpaceUsage</type>
        <type>SystemResource</type>
        <type>SystemResource</type>
        <type>SystemResource</type>
        <type>SystemResource</type>
        <type>SystemResource</type>
        <type>system</type>
      <uid>0</uid>
    </unboundplus>
    <unboundplus version="1.0.9">
        <unwantedreplythreshold/>
        <UpdateCron/>
      </updated>
      </updated>
      </updated>
      </updated>
      <updated>
      <updated>
      <updated>
      <updated>
        up your logs consuming your whole hard drive.</descr>
          <url/>
    </user>
    <user>
      <userDefinedRules/>
        <username/>
    <username/>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
        <username>root@192.168.5.204</username>
    <username>root@192.168.5.204</username>
    <usevirtualterminal>1</usevirtualterminal>
          <valid_lifetime>4000</valid_lifetime>
        <valloglevel>0</valloglevel>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
      <value>default</value>
        <verbosity/>
        <version>v9</version>
    <vip/>
      <virtual>1</virtual>
  </virtualip>
  <virtualip version="1.0.0">
    <vlan/>
  </vlans>
  <vlans version="1.0.0">
      <VTIs/>
      <vxlans version="1.0.2"/>
    </wan>
    <wan>
    </webgui>
    <webgui>
        <weight>1</weight>
        <whitelists/>
  </widgets>
  <widgets>
        <wildcards/>
        <winsserver/>
    </wireguard>
    <wireguard>
  </wireless>
  <wireless>
<?xml version="1.0"?>
      <zones/>
