FPKG V DFL-800 LШL 316 sbackup.cfg <?xml version="1.0" encoding="utf-8"?>
<SecurityGateway SchemaVersion="dfl.2.26.00.06-12649" Name="DFL-800" LocalCfgVersion="316" ConfigUser="system" ConfigSession="Local" ConfigIP="0.0.0.0" ConfigDate="2010-06-16 14:22:09">
<IPRule Name="http_ALG" Action="NAT" SourceInterface="lan" SourceNetwork="10.10.0.10-10.10.0.240" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="http" LogEnabled="True" />
<IPRule Name="ping_fw" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="core" DestinationNetwork="InterfaceAddresses/lan_ip" Service="ping-inbound" LogEnabled="True" />
<IPRuleFolder Name="lan_to_wan1">
<IPRule Name="vpn" Action="NAT" SourceInterface="wan1" SourceNetwork="all-nets" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="gre-encap" LogEnabled="True" />
<IPRule Name="vpn" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="gre-encap" LogEnabled="True" />
<IPRule Name="SAT_DNS_Relay" Action="SAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="core" DestinationNetwork="InterfaceAddresses/lan_ip" Service="dns-all" SATTranslateToIP="InterfaceAddresses/wan1_dns1" LogEnabled="True" />
<IPRule Name="drop_smb-all" Action="Drop" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="smb-all" LogEnabled="True" />
<IPRule Name="Allow_DNS_Relay" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="core" DestinationNetwork="InterfaceAddresses/lan_ip" Service="dns-all" LogEnabled="True" />
<IPRule Name="allow_ping-outbound" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="ping-outbound" LogEnabled="True" LogSeverity="Alert" />
<IPRule Name="wan2_ping-outbound" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan2" DestinationNetwork="all-nets" Service="ping-outbound" LogEnabled="True" />
<IPRule Name="allow_ftp-passthrough" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="ftp-passthrough" LogEnabled="True" />
<IPRule Name="wan2_all_tcpudp" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan2" DestinationNetwork="all-nets" Service="all_tcpudp" LogEnabled="True" />
<IPRule Name="allow_standard" Action="NAT" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="all_tcpudp" LogEnabled="True" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_sport">
<IPRule Name="IPSec_to_lan_sport" Action="Allow" SourceInterface="Tunnel_sport" SourceNetwork="SPORT" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" disabled="1" />
<IPRule Name="lan_to_IPSec_sport" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_sport" DestinationNetwork="SPORT" Service="all_services" disabled="1" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_Motel">
<IPRule Name="wins" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_motel" DestinationNetwork="Motel" Service="wins" LogEnabled="True" />
<IPRule Name="tracert" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_motel" DestinationNetwork="Motel" Service="ping-inbound" LogEnabled="True" />
<IPRule Name="allow_ping-outbound_ipsec" Action="Allow" SourceInterface="Tunnel_motel" SourceNetwork="Motel" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="ping-outbound" LogEnabled="True" />
<IPRule Name="drop_smb-all_IPsec" Action="Drop" SourceInterface="Tunnel_motel" SourceNetwork="Motel" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="smb-all" LogEnabled="True" />
<IPRule Name="lan_to_IPSec" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_motel" DestinationNetwork="Motel" Service="all_services" LogEnabled="True" />
<IPRule Name="IPSec_to_lan" Action="Allow" SourceInterface="Tunnel_motel" SourceNetwork="Motel" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" LogEnabled="True" />
<IPRule Name="allow_ftp-passthrough_IPsec" Action="NAT" SourceInterface="Tunnel_motel" SourceNetwork="Motel" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="ftp-passthrough" LogEnabled="True" />
<IPRule Name="allow_standard" Action="NAT" SourceInterface="Tunnel_motel" SourceNetwork="Motel" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="all_tcpudp" LogEnabled="True" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_ODRO">
<IPRule Name="IPSec_to_lan_odro" Action="Allow" SourceInterface="Tunnel_ODRO" SourceNetwork="ODRO" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" />
<IPRule Name="lan_to_IPSec_odro" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_ODRO" DestinationNetwork="ODRO" Service="all_services" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_bank" disabled="1">
<IPRule Name="IPSec_to_lan_bank" Action="Allow" SourceInterface="Tunnel_bank" SourceNetwork="bank" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" disabled="1" />
<IPRule Name="lan_to_IPSec_bank" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_bank" DestinationNetwork="bank" Service="all_services" disabled="1" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_Coz16">
<IPRule Name="lan_to_IPSec_Coz16" Action="Allow" SourceInterface="Tunnel_Coz62" SourceNetwork="Coz62" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" />
<IPRule Name="IPSec_Coz16_to_lan" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_Coz62" DestinationNetwork="Coz62" Service="all_services" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_Narim13">
<IPRule Name="lan_to_IPSec_Narim13" Action="Allow" SourceInterface="Tunnel_Narim13" SourceNetwork="Narim13" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" />
<IPRule Name="IPSec_Narim13_to_lan" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_Narim13" DestinationNetwork="Narim13" Service="all_services" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_GSviri16">
<IPRule Name="lan_to_IPSec_GSviri16" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_GSviri16" DestinationNetwork="GSviri16" Service="all_services" />
<IPRule Name="IPSec_GSviri16_to_lan" Action="Allow" SourceInterface="Tunnel_GSviri16" SourceNetwork="GSviri16" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" />
</IPRuleFolder>
<IPRuleFolder Name="IPSec_Frukt4">
<IPRule Name="lan_to_IPSec_Frukt4" Action="Allow" SourceInterface="Tunnel_Frukt4" SourceNetwork="Frukt4" DestinationInterface="lan" DestinationNetwork="InterfaceAddresses/lannet" Service="all_services" />
<IPRule Name="IPSec_Frukt4_to_lan" Action="Allow" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="Tunnel_Frukt4" DestinationNetwork="Frukt4" Service="all_services" />
</IPRuleFolder>
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="Motel" RemoteEndpoint="Motel_port" IKEAlgorithms="Medium" IPsecAlgorithms="Medium" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_motel" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="SPORT" RemoteEndpoint="SPORT_port" IKEAlgorithms="Medium" IPsecAlgorithms="Medium" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_sport" disabled="1" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="ODRO" RemoteEndpoint="ODRO_port" IKEAlgorithms="Medium" IPsecAlgorithms="Medium" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_ODRO" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="bank" RemoteEndpoint="bank_port" IKEAlgorithms="Medium" IPsecAlgorithms="Medium" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_bank" disabled="1" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="Frukt4" RemoteEndpoint="Frukt4_port" IKEAlgorithms="Di" IPsecAlgorithms="Di" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_Frukt4" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="Coz62" RemoteEndpoint="Coz62_port" IKEAlgorithms="Di" IPsecAlgorithms="Di" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_Coz62" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="GSviri16" RemoteEndpoint="GSviri16_port" IKEAlgorithms="Di" IPsecAlgorithms="Di" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_GSviri16" />
<IPsecTunnel LocalNetwork="all-nets" RemoteNetwork="Narim13" RemoteEndpoint="Narim13_port" IKEAlgorithms="Medium" IPsecAlgorithms="Medium" AuthMethod="PSK" PSK="IPSec_Key" Name="Tunnel_Narim13" />
<DHCPServer Name="edu" Interface="lan" IPAddressPool="10.10.0.10-10.10.0.255" Netmask="255.255.255.0" DefaultGateway="InterfaceAddresses/lan_ip" DNS1="10.10.0.1" DNS2="10.0.0.222" NBNS1="10.10.0.222">
<DHCPServerPoolStaticHost Host="10.10.0.250" MACAddress="00-1A-92-CF-3A-37" />
<DHCPServerPoolStaticHost Host="10.10.0.246" MACAddress="00-13-77-94-94-70" />
<DHCPServerPoolStaticHost Host="10.10.0.253" MACAddress="00-13-77-94-97-73" />
<DHCPServerCustomOption Code="46" Param="0С…8" />
</DHCPServer>
<PipeRule Name="test" SourceInterface="lan" SourceNetwork="InterfaceAddresses/lannet" DestinationInterface="wan1" DestinationNetwork="all-nets" Service="all_services" disabled="1" />
<PipeRule Name="test2" SourceInterface="lan" SourceNetwork="ackcmd" DestinationInterface="any" DestinationNetwork="all-nets" Service="all_services" ForwardChain="ackcmd" ReturnChain="ackcmd" disabled="1" />
<IP4Address Address="10.0.0.126" Name="ODRO_port" />
<RemoteMgmtSettings HTTPSCertificate="AdminCert" />
<LogReceiverMemory Name="MemLog" Comments="The internal logger in the firewall" />
<LocalUserDatabase Name="AdminUsers">
<User Name="admin_edu" Password="crypt1:cgA3Wpw6RUQ=:lLcosCcwl4w=" Groups="administrators" />
</LocalUserDatabase>
<Ethernet IP="InterfaceAddresses/wan1_ip" Network="InterfaceAddresses/wan1net" DefaultGateway="InterfaceAddresses/wan1_gw" Broadcast="10.0.0.255" EthernetDevice="wan1" Name="wan1" />
<EthernetDevice Name="wan1" EthernetDriver="R8139EthernetPCIDriver" PCIBus="0" PCISlot="2" PCIPort="0" />
<Ethernet IP="InterfaceAddresses/wan2_ip" Network="InterfaceAddresses/wan2net" Broadcast="10.172.216.255" EthernetDevice="wan2" Name="wan2" />
<EthernetDevice Name="wan2" EthernetDriver="R8139EthernetPCIDriver" PCIBus="0" PCISlot="1" PCIPort="0" />
<Ethernet IP="InterfaceAddresses/dmz_ip" Network="InterfaceAddresses/dmznet" Broadcast="172.17.100.255" EthernetDevice="dmz" Name="dmz" />
<EthernetDevice Name="dmz" EthernetDriver="IXP4NPEEthernetDriver" PCIBus="0" PCISlot="0" PCIPort="2" />
<Ethernet IP="InterfaceAddresses/lan_ip" Network="InterfaceAddresses/lannet" Broadcast="10.10.0.255" EthernetDevice="lan" Name="lan" />
<EthernetDevice Name="lan" EthernetDriver="IXP4NPEEthernetDriver" PCIBus="0" PCISlot="0" PCIPort="1" />
<AddressFolder Name="InterfaceAddresses">
<IP4Address Address="10.0.0.151" Name="wan1_ip" Comments="Оптика" />
<IP4Address Address="10.0.0.0/24" Name="wan1net" Comments="The network on interface wan1" />
<IP4Address Address="10.0.0.1" Name="wan1_gw" Comments="Default gateway for interface wan1." />
<IP4Address Address="10.73.0.1" Name="wan1_dns1" Comments="Primary DNS server for interface wan1." />
<IP4Address Address="10.0.0.22" Name="wan1_dns2" Comments="Secondary DNS server for interface wan1." />
<IP4Address Address="10.10.0.1" Name="lan_ip" Comments="IPAddress of interface lan" />
<IP4Address Address="10.10.0.0/24" Name="lannet" Comments="The network on interface lan" />
<IP4Address Address="172.17.100.254" Name="dmz_ip" Comments="IPAddress of interface dmz" />
<IP4Address Address="172.17.100.0/24" Name="dmznet" Comments="The network on interface dmz" />
<IP4Address Address="10.172.216.1" Name="wan2_ip" Comments="АЦК" />
<IP4Address Address="10.172.216.0/24" Name="wan2net" Comments="The network on interface wan2" />
<IP4Address Address="10.10.0.211" Name="Torrent_IP" />
</AddressFolder>
<ServiceGroup Members="l2tp-ctl, l2tp-encap" Name="l2tp-raw" Comments="L2TP control and transport, unencrypted" />
<ScheduleProfile Mon="0-24" Tue="0-24" Wed="0-24" Thu="0-24" Fri="0-24" Name="Weekdays" Comments="Monday to Friday, 00:00-23:59" />
<ScheduleProfile Mon="8-17" Tue="8-17" Wed="8-17" Thu="8-17" Fri="8-17" Name="WorkingHours" Comments="Monday to Friday, 08:00-17:00" />
<ScheduleProfile Mon="0-8, 17-24" Tue="0-8, 17-24" Wed="0-8, 17-24" Thu="0-8, 17-24" Fri="0-8, 17-24" Sat="0-24" Sun="0-24" Name="NonWorkingHours" Comments="All hours, except Monday to Friday 08:00-17:00" />
<ScheduleProfile Sat="0-24" Sun="0-24" Name="Weekends" Comments="Saturday and Sunday, 00:00-23:59" />
<Certificate Name="AdminCert" Type="Local" CertificateData="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" PrivateKey="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" />
<IKEAlgorithms Name="High" DES3Enabled="True" AESEnabled="True" BlowfishEnabled="True" MD5Enabled="True" SHA1Enabled="True" Comments="High security" />
<IPsecAlgorithms Name="High" DES3Enabled="True" AESEnabled="True" BlowfishEnabled="True" MD5Enabled="True" SHA1Enabled="True" Comments="High security" />
<IKEAlgorithms Name="Medium" DES3Enabled="True" AESEnabled="True" BlowfishEnabled="True" TwofishEnabled="True" CAST128Enabled="True" MD5Enabled="True" SHA1Enabled="True" Comments="High compatibility" />
<IPsecAlgorithms Name="Medium" DES3Enabled="True" AESEnabled="True" BlowfishEnabled="True" TwofishEnabled="True" CAST128Enabled="True" MD5Enabled="True" SHA1Enabled="True" Comments="High compatibility" />
<DNS DNSServer1="InterfaceAddresses/wan1_dns1" />
<RemoteMgmtHTTP Name="RemoteMgmtHTTP" Interface="lan" LocalUserDatabase="AdminUsers" HTTPS="True" Network="InterfaceAddresses/lannet" />
<ALG_SMTP VerifySenderEmail="True" Name="smtp-inbound" File="cmd, com, doc, exe, pif, ppt, scr, xls" VerifyContentMimetype="True" />
<ServiceTCPUDP DestinationPorts="25" ALG="smtp-inbound" MaxSessions="500" Name="smtp-inbound" Comments="Simple Mail Transfer Protocol via SMTP ALG." />
<ALG_HTTP Name="http-outbound" FailModeBehavior="Allow" File="aac, aif, aiff, asf, asx, avi, avr, flc, fli, flv, jng, moov, mov, mp3, mp4, mpg, mpv, noa, ogg, pls, qt, wmv, xm, xmcd">
<ALG_HTTP_URL URL="*marketgid.com*" />
<ALG_HTTP_URL URL="*.kalabum.com/*" />
<ALG_HTTP_URL URL="*adskape.ru/*" />
<ALG_HTTP_URL URL="*lov2lov.ru/*" />
<ALG_HTTP_URL URL="*love.*.ru/*" />
<ALG_HTTP_URL URL="*.fishki.net/*" />
<ALG_HTTP_URL URL="*.ddfcash.com/*" />
<ALG_HTTP_URL URL="*.extasix.com/*" />
<ALG_HTTP_URL URL="*.yadro.ru/*" />
<ALG_HTTP_URL URL="*.adriver.ru/*" />
<ALG_HTTP_URL URL="*.a3jhk2.com/*" />
<ALG_HTTP_URL URL="*.loots-leg.com/*" />
<ALG_HTTP_URL URL="*.tns-counter.ru/*" />
<ALG_HTTP_URL URL="*.29898x.com/*" />
<ALG_HTTP_URL URL="*.a3ax.com/*" />
<ALG_HTTP_URL URL="*.292kss.com/*" />
<ALG_HTTP_URL URL="*.doubleclick.net/*" />
<ALG_HTTP_URL URL="*.9dk2.com/*" />
<ALG_HTTP_URL URL="*.dansmovies.com/*" />
<ALG_HTTP_URL URL="*.ak33hx.com/*" />
<ALG_HTTP_URL URL="*.ulibnis.com/*" />
<ALG_HTTP_URL URL="*.bannerhost.ru/*" />
<ALG_HTTP_URL URL="*.begun.ru/*" />
<ALG_HTTP_URL URL="*.29911ss.com/*" />
<ALG_HTTP_URL URL="*.redtram.com/*" />
<ALG_HTTP_URL URL="*.eronsk.ru/*" />
<ALG_HTTP_URL URL="*.naked.com/*" />
<ALG_HTTP_URL URL="*.webtrends.com/*" />
<ALG_HTTP_URL URL="*.doseng.org/*" />
<ALG_HTTP_URL URL="*.2o1jx.com/*" />
<ALG_HTTP_URL URL="*.flirtomir.com/*" />
<ALG_HTTP_URL URL="*.hardsextacy.com/*" />
<ALG_HTTP_URL URL="*.200x150.com/*" />
<ALG_HTTP_URL URL="*.porn-stars-nude.com/*" />
<ALG_HTTP_URL URL="*.weuydgheqw-3dklms.com/*" />
<ALG_HTTP_URL URL="*.googlesyndication.com/*" />
<ALG_HTTP_URL URL="*.beeset.ru/*" />
<ALG_HTTP_URL URL="*.crankmovies.com/*" />
<ALG_HTTP_URL URL="*.hd-porn-movies.com/*" />
<ALG_HTTP_URL URL="*.zarabotki.ru/*" />
<ALG_HTTP_URL URL="*.dofiga.net/*" />
<ALG_HTTP_URL URL="*.groupcase.net/*" />
<ALG_HTTP_URL URL="*.yetimovies.com/*" />
<ALG_HTTP_URL URL="*.relax.ru/*" />
<ALG_HTTP_URL URL="*.popunder.ru/*" />
<ALG_HTTP_URL URL="*.kackad.kz/*" />
<ALG_HTTP_URL URL="*.glamurki.com/*" />
<ALG_HTTP_URL URL="*.assisass.com/*" />
<ALG_HTTP_URL URL="*.rosbalt.ru/*" />
<ALG_HTTP_URL URL="*.nexxx.com/*" />
<ALG_HTTP_URL URL="*.gabrio.com/*" />
<ALG_HTTP_URL URL="*.classicpornstar.net/*" />
<ALG_HTTP_URL URL="*.traffic-bomb.net/*" />
<ALG_HTTP_URL URL="*.erotizer.info/*" />
<ALG_HTTP_URL URL="*.adfox.ru/*" />
<ALG_HTTP_URL URL="*.auroporn.com/*" />
<ALG_HTTP_URL URL="*.anekdotov.net/*" />
<ALG_HTTP_URL URL="*.awaps.net/*" />
<ALG_HTTP_URL URL="*.wildberries.ru/*" />
<ALG_HTTP_URL URL="*.wild-mistress.ru/*" />
<ALG_HTTP_URL URL="*.jaildog.com/*" />
<ALG_HTTP_URL URL="*.tv2n.com/*" />
<ALG_HTTP_URL URL="*.fetishhitsgallery.com/*" />
<ALG_HTTP_URL URL="*.exittracking.com/*" />
<ALG_HTTP_URL URL="*.gemius.pl/*" />
<ALG_HTTP_URL URL="*.dt00.net/*" />
<ALG_HTTP_URL URL="*mediamayhemcorp.com/*" />
<ALG_HTTP_URL URL="*.stat24.com/*" />
<ALG_HTTP_URL URL="*.spylog.com/*" />
<ALG_HTTP_URL URL="*.loadup.ru/*" />
<ALG_HTTP_URL URL="*.popup2m.com/*" />
<ALG_HTTP_URL URL="*stream??.rambler.ru/*" />
<ALG_HTTP_URL URL="*webazilla.com/*" />
<ALG_HTTP_URL URL="*upload.com.ua/*" />
<ALG_HTTP_URL URL="*letitbit.mchost.ru*/" />
<ALG_HTTP_URL URL="*advmaker.ru/*" />
<ALG_HTTP_URL URL="*torrents.ru/*" />
<ALG_HTTP_URL URL="*rapidshare.de/*" />
<ALG_HTTP_URL URL="*rapidshare.com/*" />
<ALG_HTTP_URL URL="*megaupload.com/*" />
<ALG_HTTP_URL URL="*filefactory.com/*" />
<ALG_HTTP_URL URL="*.easy-share.com/*" />
<ALG_HTTP_URL URL="*uploading.com/*" />
<ALG_HTTP_URL URL="*depositfiles.com/*" />
<ALG_HTTP_URL URL="*.ifolder.ru/*" />
<ALG_HTTP_URL URL="*.getthebit.com/*" />
<ALG_HTTP_URL URL="*uaget.com/*" />
<ALG_HTTP_URL URL="*uploading.com/*" />
<ALG_HTTP_URL URL="*.sharemania.ru/*" />
<ALG_HTTP_URL URL="*vip-file.ru/*" />
<ALG_HTTP_URL URL="*.filesmonster.ru/*" />
<ALG_HTTP_URL URL="*.bitroad.net/*" />
<ALG_HTTP_URL URL="*.x2b.ru/*" />
<ALG_HTTP_URL URL="*.playfile.ru/*" />
<ALG_HTTP_URL URL="*minihost.su/*" />
<ALG_HTTP_URL URL="*2shared.com/*" />
<ALG_HTTP_URL URL="*4shared.com/*" />
<ALG_HTTP_URL URL="*allfiles.ru/*" />
<ALG_HTTP_URL URL="*axifile.com/*" />
<ALG_HTTP_URL URL="*badongo.com/*" />
<ALG_HTTP_URL URL="*badongo.com/*" />
<ALG_HTTP_URL URL="*bigupload.com/*" />
<ALG_HTTP_URL URL="*bonpoo.com/*" />
<ALG_HTTP_URL URL="*come2store.com/*" />
<ALG_HTTP_URL URL="*data.cod.ru/*" />
<ALG_HTTP_URL URL="*depeshare.com/*" />
<ALG_HTTP_URL URL="*desiupload.net/*" />
<ALG_HTTP_URL URL="*easy-sharing.com/*" />
<ALG_HTTP_URL URL="*edisk.cz/*" />
<ALG_HTTP_URL URL="*egoshare.com/*" />
<ALG_HTTP_URL URL="*filearchiv.ru/*" />
<ALG_HTTP_URL URL="*filecache.de/*" />
<ALG_HTTP_URL URL="*filefactory.ru/*" />
<ALG_HTTP_URL URL="*filefront.com/*" />
<ALG_HTTP_URL URL="*filepost.ru/*" />
<ALG_HTTP_URL URL="*files.to/*" />
<ALG_HTTP_URL URL="*filespace.ru/*" />
<ALG_HTTP_URL URL="*filesupload.com/*" />
<ALG_HTTP_URL URL="*files-upload.com/*" />
<ALG_HTTP_URL URL="*flyfolder.ru/*" />
<ALG_HTTP_URL URL="*flyupload.com/*" />
<ALG_HTTP_URL URL="*fsx.hu/*" />
<ALG_HTTP_URL URL="*gigasize.com/*" />
<ALG_HTTP_URL URL="*9down.com/*" />
<ALG_HTTP_URL URL="*mediafire.com/*" />
<ALG_HTTP_URL URL="*megarotic.com/*" />
<ALG_HTTP_URL URL="*upload.megashare.com/*" />
<ALG_HTTP_URL URL="*midload.com/*" />
<ALG_HTTP_URL URL="*netload.in/*" />
<ALG_HTTP_URL URL="*rapidshare.ru/*" />
<ALG_HTTP_URL URL="*sendspace.com/*" />
<ALG_HTTP_URL URL="*megaporn.com/*" />
<ALG_HTTP_URL URL="*shareua.com/*" />
<ALG_HTTP_URL URL="*simpleupload.net/*" />
<ALG_HTTP_URL URL="*slil.ru/*" />
<ALG_HTTP_URL URL="*speedshare.org/*" />
<ALG_HTTP_URL URL="*speedyshare.com/*" />
<ALG_HTTP_URL URL="*spread-it.com/*" />
<ALG_HTTP_URL URL="*storeandserve.com/*" />
<ALG_HTTP_URL URL="*supashare.com/*" />
<ALG_HTTP_URL URL="*turboupload.com/*" />
<ALG_HTTP_URL URL="*ultrashare.de/*" />
<ALG_HTTP_URL URL="*up-file.com/*" />
<ALG_HTTP_URL URL="*uploaded.to/*" />
<ALG_HTTP_URL URL="*uploadyourfiles.de/*" />
<ALG_HTTP_URL URL="*verzend.be/*" />
<ALG_HTTP_URL URL="*virgilio.it/*" />
<ALG_HTTP_URL URL="*webfile.ru/*" />
<ALG_HTTP_URL URL="*webfilehost.com/*" />
<ALG_HTTP_URL URL="*yourfilehost.com/*" />
<ALG_HTTP_URL URL="*yourfilelink.com/*" />
<ALG_HTTP_URL URL="*yousendit.com/*" />
<ALG_HTTP_URL URL="*zippyshare.com/*" />
<ALG_HTTP_URL URL="*zshare.net/*" />
<ALG_HTTP_URL URL="*online-tele-vision.com/*" />
<ALG_HTTP_URL URL="*rapidlinks.ru/*" />
<ALG_HTTP_URL Action="Whitelist" URL="http://10.0.0.10/ulgov/sharefiles.nsf" />
<ALG_HTTP_URL URL="*letitbit.net/*" />
<ALG_HTTP_URL URL="*avangarddsl.ru/*" />
<ALG_HTTP_URL URL="*uvw.ru/*" />
<ALG_HTTP_URL URL="*keymachine.de/*" />
<ALG_HTTP_URL URL="*ur.ru/*" />
<ALG_HTTP_URL URL="*broadband.corbina.ru/*" />
<ALG_HTTP_URL URL="*arcor-ip.net/*" />
<ALG_HTTP_URL URL="*broadband.bashtel.ru/*" />
<ALG_HTTP_URL URL="*tmn.ertelecom.ru/*" />
<ALG_HTTP_URL URL="*pppoe.mtu-net.ru/*" />
<ALG_HTTP_URL URL="*ertelecom.ru/*" />
<ALG_HTTP_URL URL="*ukrtel.net/*" />
<ALG_HTTP_URL URL="*.ukrtel.net/*" />
<ALG_HTTP_URL URL="*.sbcglobal.net/*" />
<ALG_HTTP_URL URL="*video.mail.ru*" />
<ALG_HTTP_URL URL="*.llnw.net/*" />
<ALG_HTTP_URL URL="*.loveplanet.ru/*" />
<ALG_HTTP_URL URL="*youtube.com/*" />
<ALG_HTTP_URL URL="*www.getthebit.com/*" />
<ALG_HTTP_URL Action="Whitelist" URL="*content.foto.mail.ru/*" />
<ALG_HTTP_URL URL="*.customer.teliacarrier.com*" />
<ALG_HTTP_URL URL="*mpa.one.microsoft.com*" />
<ALG_HTTP_URL URL="*vkontakte.ru*" />
</ALG_HTTP>
<ServiceTCPUDP DestinationPorts="80" ALG="http-outbound" MaxSessions="2000" Name="http-outbound" Comments="HTTP via HTTP ALG "http-outbound" - strips all active content" />
<RoutingTable Name="main" Ordering="Default" RemoveInterfaceIPRoutes="True" Comments="The main routing table of the system.">
<Route Interface="wan2" Gateway="10.172.216.243" Network="10.172.207.243" disabled="1" />
<Route Interface="wan2" Gateway="10.172.216.243" Network="10.172.217.3" disabled="1" />
<Route Interface="wan2" Gateway="10.172.216.243" Network="10.172.4.101" disabled="1" />
<Route Interface="wan2" Gateway="10.172.216.243" Network="10.172.4.205" disabled="1" />
<Route Interface="wan2" Gateway="10.172.216.243" Network="10.172.4.201" disabled="1" />
<Route Interface="wan2" Gateway="10.172.216.243" Network="10.172.4.208" Metric="10" disabled="1" />
</RoutingTable>
<IPSettings TTLMin="1" TTLOnLow="Log" />
<TCPSettings TCPMSSMax="1400" />
<IP4Address Address="10.0.3.162" Name="SPORT_port" />
<IP4Address Address="10.1.0.246" Name="Motel_port" />
<ServiceTCPUDP Type="TCPUDP" DestinationPorts="45678" Name="Torrent" />
<IP4Address Address="192.168.2.0/24" Name="SPORT" Comments="Сеть деп спорта" />
<PSK Name="IPSec_Key" Type="ASCII" PSKAscii="1123581321" Comments="1123581321" />
<IP4Address Address="10.10.2.0/24" Name="ODRO" Comments="Сеть в ОДРО" />
<ServiceTCPUDP Type="TCPUDP" DestinationPorts="0-1025, 2525, 1111, 1723, 1110, 2041, 2042, 5190, 2009, 2888, 2001, 2666, 1376, 1352, 4433, 2003, 6669, 8080, 2999, 2010, 5432, 3389, 33333, 6500, 36757, 55777, 8090, 5050, 8686, 5500, 8088, 8089, 17520" Name="all_tcpudp" Comments="All TCP and UDP services" />
<ServiceTCPUDP DestinationPorts="0-1025, 2525, 1111, 1723, 1110, 2041, 2042, 5190, 2009, 2888, 2001, 2666, 1376, 1352, 4433, 2003, 6669, 8080, 2999, 2010, 5432, 3389, 33333, 6500, 36757, 55777, 8090, 5050, 8686, 5500, 8088, 8089, 17520" Name="all_tcp" Comments="All TCP services " />
<ServiceTCPUDP Type="UDP" DestinationPorts="0-1025, 2525, 1111, 1723, 1110, 2041, 2042, 5190, 2009, 2888, 2001, 2666, 1376, 1352, 4433, 2003, 6669, 8080, 2999, 2010, 5432, 3389, 33333, 6500, 36757, 55777, 8090, 5050, 8686, 5500, 8088, 8089, 17520" Name="all_udp" Comments="All UDP services" />
<IP4Address Address="10.10.1.0/24" Name="Motel" Comments="Сеть в гос. Советская" />
<DateTime TimeZone="GMTplus3" TimeSynchronization="D-Link" />
<IP4Address Address="10.10.1.254" Name="bank_port" />
<IP4Address Address="10.10.10.0/24" Name="bank" />
<Pipe Name="Untitled" LimitKbpsTotal="100000" UserLimitKbpsTotal="100000" Grouping="SourceIP" Dynamic="True" />
<ServiceTCPUDP SourcePorts="80" DestinationPorts="80" PassICMPReturn="True" ALG="http-outbound" MaxSessions="2000" Name="http" Comments="World Wide Web HTTP" />
<LogReceiverSyslog IPAddress="10.10.0.246" Name="syslog" />
<IP4Address Address="10.10.0.254" Name="ackcmd" />
<Pipe Name="ackcmd" LimitKbpsTotal="100000" />
<IP4Address Address="10.0.21.26" Name="Coz62_port" />
<IP4Address Address="10.10.5.0/24" Name="Coz62" Comments="пр-т Созидателей, 62" />
<IP4Address Address="10.0.21.22" Name="GSviri16_port" />
<IP4Address Address="10.10.7.0/24" Name="GSviri16" Comments="ул.Героев Свири, 16" />
<IP4Address Address="10.0.21.18" Name="Frukt4_port" />
<IP4Address Address="10.10.6.0/24" Name="Frukt4" Comments="ул.Фруктовая,4" />
<IP4Address Address="10.0.19.110" Name="Narim13_port" />
<IP4Address Address="10.10.8.0/24" Name="Narim13" Comments="пр-т Нариманова, 13" />
<IKEAlgorithms Name="Di" DESEnabled="True" MD5Enabled="True" SHA1Enabled="True" />
<IPsecAlgorithms Name="Di" DESEnabled="True" MD5Enabled="True" SHA1Enabled="True" />
</SecurityGateway> checksum =6љt
Вход
Регистрация
FAQ
Поиск
