<?xml version='1.0' encoding='utf-8'?>
<pfsense>
  <version>19.1</version>
  <lastchange />
  <system>
    <optimization>normal</optimization>
    <hostname>pfSense</hostname>
    <domain>localdomain</domain>
    <group>
      <name>all</name>
      <description>All Users</description>
      <scope>system</scope>
      <gid>1998</gid>
      <member>0</member>
    </group>
    <group>
      <name>admins</name>
      <description>System Administrators</description>
      <scope>system</scope>
      <gid>1999</gid>
      <member>0</member>
      <priv>page-all</priv>
    </group>
    <user>
      <name>admin</name>
      <descr>System Administrator</descr>
      <scope>system</scope>
      <groupname>admins</groupname>
      <bcrypt-hash>[REDACTED]</bcrypt-hash>
      <uid>0</uid>
      <priv>user-shell-access</priv>
    </user>
    <nextuid>2000</nextuid>
    <nextgid>2000</nextgid>
    <timeservers>0.pfsense.pool.ntp.org</timeservers>
    <webgui>
      <protocol>https</protocol>
      <loginautocomplete />
      <ssl-certref />
      <althostnames />
      <dashboardcolumns>2</dashboardcolumns>
      <webguicss>pfSense.css</webguicss>
      <logincss>1e3f75;</logincss>
    </webgui>
    <disablenatreflection>yes</disablenatreflection>
    <disablesegmentationoffloading />
    <disablelargereceiveoffloading />
    <ipv6allow />
    <maximumtableentries>400000</maximumtableentries>
    <powerd_ac_mode>hadp</powerd_ac_mode>
    <powerd_battery_mode>hadp</powerd_battery_mode>
    <powerd_normal_mode>hadp</powerd_normal_mode>
    <bogons>
      <interval>monthly</interval>
    </bogons>
    <enableserial />
    <already_run_config_upgrade />
    <timezone>Etc/UTC</timezone>
    <crypto_hardware>aesni_cryptodev</crypto_hardware>
    <use_mfs_tmp_size />
    <use_mfs_var_size />
    <language>en_US</language>
    <dnsserver>91.239.100.100</dnsserver>
    <dnsserver>89.233.43.71</dnsserver>
    <dns1gw>none</dns1gw>
    <dns1host />
    <dns2gw>none</dns2gw>
    <dns2host />
  </system>
  <interfaces>
    <wan>
      <enable />
      <if>igb0</if>
      <ipaddr>dhcp</ipaddr>
      <ipaddrv6>dhcp6</ipaddrv6>
      <gateway />
      <blockpriv>on</blockpriv>
      <blockbogons>on</blockbogons>
      <media />
      <mediaopt />
      <dhcp6-duid />
      <dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
      <subnetv6 />
      <gatewayv6 />
    </wan>
    <lan>
      <enable />
      <if>igb1</if>
      <ipaddr>192.168.1.1</ipaddr>
      <subnet>24</subnet>
      <ipaddrv6>track6</ipaddrv6>
      <subnetv6>64</subnetv6>
      <media />
      <mediaopt />
      <track6-interface>wan</track6-interface>
      <track6-prefix-id>0</track6-prefix-id>
    </lan>
    <opt1>
      <descr>DMZ</descr>
      <if>igb2</if>
      <enable />
      <ipaddr>10.0.0.1</ipaddr>
      <subnet>24</subnet>
      <spoofmac />
    </opt1>
    <opt2>
      <descr>MULLVAD1</descr>
      <if>ovpnc1</if>
      <enable />
      <spoofmac />
    </opt2>
    <opt3>
      <descr>MULLVAD2</descr>
      <if>ovpnc2</if>
      <enable />
      <spoofmac />
    </opt3>
    <opt4>
      <descr>VLAN2</descr>
      <if>igb2.2</if>
      <spoofmac />
      <enable />
      <ipaddr>10.0.2.1</ipaddr>
      <subnet>24</subnet>
    </opt4>
    <opt5>
      <descr>VLAN3</descr>
      <if>igb2.3</if>
      <enable />
      <ipaddr>10.0.3.1</ipaddr>
      <subnet>24</subnet>
      <spoofmac />
    </opt5>
  </interfaces>
  <staticroutes />
  <dhcpd>
    <lan>
      <enable />
      <range>
        <from>192.168.1.10</from>
        <to>192.168.1.245</to>
      </range>
      <dhcpleaseinlocaltime />
      <failover_peerip />
      <defaultleasetime />
      <maxleasetime />
      <netmask />
      <dnsserver>91.239.100.100</dnsserver>
      <dnsserver>89.233.43.71</dnsserver>
      <gateway />
      <domain />
      <domainsearchlist />
      <ddnsdomain />
      <ddnsdomainprimary />
      <ddnsdomainkeyname />
      <ddnsdomainkeyalgorithm>hmac-md5</ddnsdomainkeyalgorithm>
      <ddnsdomainkey />
      <mac_allow />
      <mac_deny />
      <ddnsclientupdates>allow</ddnsclientupdates>
      <tftp />
      <ldap />
      <nextserver />
      <filename />
      <filename32 />
      <filename64 />
      <rootpath />
      <numberoptions />
    </lan>
    <opt1>
      <range>
        <from>10.0.0.1</from>
        <to>10.0.0.254</to>
      </range>
      <enable />
      <failover_peerip />
      <defaultleasetime />
      <maxleasetime />
      <netmask />
      <dnsserver>91.239.100.100</dnsserver>
      <dnsserver>89.233.43.71</dnsserver>
      <gateway />
      <domain />
      <domainsearchlist />
      <ddnsdomain />
      <ddnsdomainprimary />
      <ddnsdomainkeyname />
      <ddnsdomainkeyalgorithm>hmac-md5</ddnsdomainkeyalgorithm>
      <ddnsdomainkey />
      <mac_allow />
      <mac_deny />
      <ddnsclientupdates>allow</ddnsclientupdates>
      <tftp />
      <ldap />
      <nextserver />
      <filename />
      <filename32 />
      <filename64 />
      <rootpath />
      <numberoptions />
      <dhcpleaseinlocaltime />
    </opt1>
    <opt4>
      <range>
        <from>10.0.2.1</from>
        <to>10.0.2.100</to>
      </range>
      <enable />
      <failover_peerip />
      <defaultleasetime />
      <maxleasetime />
      <netmask />
      <gateway />
      <domain />
      <domainsearchlist />
      <ddnsdomain />
      <ddnsdomainprimary />
      <ddnsdomainkeyname />
      <ddnsdomainkeyalgorithm>hmac-md5</ddnsdomainkeyalgorithm>
      <ddnsdomainkey />
      <mac_allow />
      <mac_deny />
      <ddnsclientupdates>allow</ddnsclientupdates>
      <tftp />
      <ldap />
      <nextserver />
      <filename />
      <filename32 />
      <filename64 />
      <rootpath />
      <numberoptions />
      <dhcpleaseinlocaltime />
    </opt4>
    <opt5>
      <range>
        <from>10.0.3.1</from>
        <to>10.0.3.100</to>
      </range>
      <enable />
      <failover_peerip />
      <defaultleasetime />
      <maxleasetime />
      <netmask />
      <dnsserver>91.239.100.100</dnsserver>
      <dnsserver>89.233.43.71</dnsserver>
      <gateway />
      <domain />
      <domainsearchlist />
      <ddnsdomain />
      <ddnsdomainprimary />
      <ddnsdomainkeyname />
      <ddnsdomainkeyalgorithm>hmac-md5</ddnsdomainkeyalgorithm>
      <ddnsdomainkey />
      <mac_allow />
      <mac_deny />
      <ddnsclientupdates>allow</ddnsclientupdates>
      <tftp />
      <ldap />
      <nextserver />
      <filename />
      <filename32 />
      <filename64 />
      <rootpath />
      <numberoptions />
    </opt5>
  </dhcpd>
  <dhcpdv6>
    <lan>
      <enable />
      <range>
        <from>::1000</from>
        <to>::2000</to>
      </range>
      <ramode>assist</ramode>
      <rapriority>medium</rapriority>
    </lan>
  </dhcpdv6>
  <snmpd>
    <syslocation />
    <syscontact />
    <rocommunity>public</rocommunity>
  </snmpd>
  <diag>
    <ipv6nat>
      <ipaddr />
    </ipv6nat>
  </diag>
  <syslog>
    <filterdescriptions>1</filterdescriptions>
  </syslog>
  <nat>
    <outbound>
      <mode>advanced</mode>
      <rule>
        <interface>wan</interface>
        <source>
          <network>127.0.0.0/8</network>
        </source>
        <dstport>500</dstport>
        <target />
        <destination>
          <any />
        </destination>
        <staticnatport />
        <descr>Auto created rule for ISAKMP - localhost to WAN</descr>
        <created>
          <time>1577836800</time>
          <username>Manual Outbound NAT Switch</username>
        </created>
      </rule>
      <rule>
        <interface>wan</interface>
        <source>
          <network>127.0.0.0/8</network>
        </source>
        <sourceport />
        <target />
        <destination>
          <any />
        </destination>
        <natport />
        <descr>Auto created rule - localhost to WAN</descr>
        <created>
          <time>1577836800</time>
          <username>Manual Outbound NAT Switch</username>
        </created>
      </rule>
      <rule>
        <interface>wan</interface>
        <source>
          <network>::1/128</network>
        </source>
        <dstport>500</dstport>
        <target />
        <destination>
          <any />
        </destination>
        <staticnatport />
        <descr>Auto created rule for ISAKMP - localhost to WAN</descr>
        <created>
          <time>1577836800</time>
          <username>Manual Outbound NAT Switch</username>
        </created>
      </rule>
      <rule>
        <interface>wan</interface>
        <source>
          <network>::1/128</network>
        </source>
        <sourceport />
        <target />
        <destination>
          <any />
        </destination>
        <natport />
        <descr>Auto created rule - localhost to WAN</descr>
        <created>
          <time>1577836800</time>
          <username>Manual Outbound NAT Switch</username>
        </created>
      </rule>
      <rule>
        <source>
          <network>192.168.1.0/24</network>
        </source>
        <sourceport />
        <descr>LAN to MULLVAD2</descr>
        <target />
        <targetip />
        <targetip_subnet />
        <interface>opt3</interface>
        <poolopts />
        <source_hash_key />
        <destination>
          <any />
        </destination>
        <created>
          <time>1577836800</time>
          <username>Manual Outbound NAT Switch</username>
        </created>
        <updated>
          <time>1577836800</time>
          <username>admin (Local Database)</username>
        </updated>
      </rule>
      <rule>
        <source>
          <network>10.0.0.0/24</network>
        </source>
        <sourceport />
        <descr>DMZ to MULLVAD2</descr>
        <target />
        <targetip />
        <targetip_subnet />
        <interface>opt3</interface>
        <poolopts />
        <source_hash_key />
        <destination>
          <any />
        </destination>
        <created>
          <time>1577836800</time>
          <username>Manual Outbound NAT Switch</username>
        </created>
        <updated>
          <time>1577836800</time>
          <username>admin (Local Database)</username>
        </updated>
      </rule>
      <rule>
        <source>
          <network>10.0.2.0/24</network>
        </source>
        <sourceport />
        <descr>VLAN2 to WAN</descr>
        <target />
        <targetip />
        <targetip_subnet />
        <interface>wan</interface>
        <poolopts />
        <source_hash_key />
        <destination>
          <any />
        </destination>
        <updated>
          <time>1577836800</time>
          <username>admin (Local Database)</username>
        </updated>
        <created>
          <time>1577836800</time>
          <username>admin (Local Database)</username>
        </created>
      </rule>
      <rule>
        <source>
          <network>10.0.3.0/24</network>
        </source>
        <sourceport />
        <descr>VLAN3 to MULLVAD1</descr>
        <target />
        <targetip />
        <targetip_subnet />
        <interface>opt2</interface>
        <poolopts />
        <source_hash_key />
        <destination>
          <any />
        </destination>
        <created>
          <time>1577836800</time>
          <username>admin (Local Database)</username>
        </created>
        <updated>
          <time>1577836800</time>
          <username>admin (Local Database)</username>
        </updated>
      </rule>
    </outbound>
    <separator />
    <rule>
      <source>
        <any />
      </source>
      <destination>
        <network>wanip</network>
        <port>80</port>
      </destination>
      <protocol>tcp/udp</protocol>
      <target>10.0.2.2</target>
      <local-port>80</local-port>
      <interface>wan</interface>
      <descr>HTTP to webserver</descr>
      <associated-rule-id>nat_5e7bb3b731ebf3.20248323</associated-rule-id>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <source>
        <any />
      </source>
      <destination>
        <network>wanip</network>
        <port>443</port>
      </destination>
      <protocol>tcp/udp</protocol>
      <target>10.0.2.2</target>
      <local-port>443</local-port>
      <interface>wan</interface>
      <descr>HTTPS to webserver</descr>
      <associated-rule-id>nat_5e7bb3f7a503d5.68828728</associated-rule-id>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
  </nat>
  <filter>
    <separator>
      <lan />
    </separator>
    <rule>
      <id />
      <tracker>1585137356</tracker>
      <type>block</type>
      <interface>wan</interface>
      <ipprotocol>inet46</ipprotocol>
      <tag />
      <tagged>MULLVAD_NO_WAN_EGRESS</tagged>
      <direction>any</direction>
      <floating>yes</floating>
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Disable Mullvad WAN Egress</descr>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
    </rule>
    <rule>
      <source>
        <any />
      </source>
      <interface>wan</interface>
      <protocol>tcp/udp</protocol>
      <destination>
        <address>10.0.2.2</address>
        <port>80</port>
      </destination>
      <descr>NAT HTTP to webserver</descr>
      <associated-rule-id>nat_5e7bb3b731ebf3.20248323</associated-rule-id>
      <tracker>1585165239</tracker>
      <created>
        <time>1577836800</time>
        <username>NAT Port Forward</username>
      </created>
    </rule>
    <rule>
      <source>
        <any />
      </source>
      <interface>wan</interface>
      <protocol>tcp/udp</protocol>
      <destination>
        <address>10.0.2.2</address>
        <port>443</port>
      </destination>
      <descr>NAT HTTPS to webserver</descr>
      <associated-rule-id>nat_5e7bb3f7a503d5.68828728</associated-rule-id>
      <tracker>1585165303</tracker>
      <created>
        <time>1577836800</time>
        <username>NAT Port Forward</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585138184</tracker>
      <type>block</type>
      <interface>lan</interface>
      <ipprotocol>inet46</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <protocol>tcp/udp</protocol>
      <source>
        <any />
      </source>
      <destination>
        <network>(self)</network>
        <port>53</port>
      </destination>
      <descr />
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585138257</tracker>
      <type>block</type>
      <interface>lan</interface>
      <ipprotocol>inet6</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Drop LAN ipv6 traffic</descr>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585138395</tracker>
      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet</ipprotocol>
      <tag>MULLVAD_NO_WAN_EGRESS</tag>
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Send LAN over MULLVAD2</descr>
      <gateway>MULLVAD2_VPNV4</gateway>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585138492</tracker>
      <type>block</type>
      <interface>opt1</interface>
      <ipprotocol>inet46</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <protocol>tcp/udp</protocol>
      <source>
        <any />
      </source>
      <destination>
        <network>(self)</network>
        <port>53</port>
      </destination>
      <descr>Block DMZ local DNS leak</descr>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585138521</tracker>
      <type>block</type>
      <interface>opt1</interface>
      <ipprotocol>inet6</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Drop DMZ ipv6 traffic</descr>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585138567</tracker>
      <type>pass</type>
      <interface>opt1</interface>
      <ipprotocol>inet</ipprotocol>
      <tag>MULLVAD_NO_WAN_EGRESS</tag>
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Send DMZ over MULLVAD2</descr>
      <gateway>MULLVAD2_VPNV4</gateway>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585165167</tracker>
      <type>pass</type>
      <interface>opt4</interface>
      <ipprotocol>inet</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Allow VLAN2 to any rule NO VPN</descr>
      <gateway>WAN_DHCP</gateway>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585165839</tracker>
      <type>block</type>
      <interface>opt5</interface>
      <ipprotocol>inet46</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <protocol>tcp/udp</protocol>
      <source>
        <any />
      </source>
      <destination>
        <network>(self)</network>
        <port>53</port>
      </destination>
      <descr>Block VLAN3 local DNS leak</descr>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
    </rule>
    <rule>
      <id />
      <tracker>1585165911</tracker>
      <type>block</type>
      <interface>opt5</interface>
      <ipprotocol>inet6</ipprotocol>
      <tag />
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Drop VLAN3 ipv6 traffic</descr>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
    <rule>
      <id />
      <tracker>1585165973</tracker>
      <type>pass</type>
      <interface>opt5</interface>
      <ipprotocol>inet</ipprotocol>
      <tag>MULLVAD_NO_WAN_EGRESS</tag>
      <tagged />
      <max />
      <max-src-nodes />
      <max-src-conn />
      <max-src-states />
      <statetimeout />
      <statetype>keep state</statetype>
      <os />
      <source>
        <any />
      </source>
      <destination>
        <any />
      </destination>
      <descr>Send VLAN3 over MULLVAD1</descr>
      <gateway>MULLVAD1_VPNV4</gateway>
      <updated>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </updated>
      <created>
        <time>1577836800</time>
        <username>admin (Local Database)</username>
      </created>
    </rule>
  </filter>
  <shaper>
	</shaper>
  <ipsec />
  <aliases />
  <proxyarp />
  <cron>
    <item>
      <minute>1,31</minute>
      <hour>0-5</hour>
      <mday>*</mday>
      <month>*</month>
      <wday>*</wday>
      <who>root</who>
      <command>/usr/bin/nice -n20 adjkerntz -a</command>
    </item>
    <item>
      <minute>1</minute>
      <hour>3</hour>
      <mday>1</mday>
      <month>*</month>
      <wday>*</wday>
      <who>root</who>
      <command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
    </item>
    <item>
      <minute>1</minute>
      <hour>1</hour>
      <mday>*</mday>
      <month>*</month>
      <wday>*</wday>
      <who>root</who>
      <command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
    </item>
    <item>
      <minute>*/60</minute>
      <hour>*</hour>
      <mday>*</mday>
      <month>*</month>
      <wday>*</wday>
      <who>root</who>
      <command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
    </item>
    <item>
      <minute>30</minute>
      <hour>12</hour>
      <mday>*</mday>
      <month>*</month>
      <wday>*</wday>
      <who>root</who>
      <command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
    </item>
    <item>
      <minute>1</minute>
      <hour>0</hour>
      <mday>*</mday>
      <month>*</month>
      <wday>*</wday>
      <who>root</who>
      <command>/usr/bin/nice -n20 /etc/rc.update_pkg_metadata</command>
    </item>
  </cron>
  <wol />
  <rrd>
    <enable />
  </rrd>
  <load_balancer>
    <monitor_type>
      <name>ICMP</name>
      <type>icmp</type>
      <descr>ICMP</descr>
      <options />
    </monitor_type>
    <monitor_type>
      <name>TCP</name>
      <type>tcp</type>
      <descr>Generic TCP</descr>
      <options />
    </monitor_type>
    <monitor_type>
      <name>HTTP</name>
      <type>http</type>
      <descr>Generic HTTP</descr>
      <options>
        <path>/</path>
        <host />
        <code>200</code>
      </options>
    </monitor_type>
    <monitor_type>
      <name>HTTPS</name>
      <type>https</type>
      <descr>Generic HTTPS</descr>
      <options>
        <path>/</path>
        <host />
        <code>200</code>
      </options>
    </monitor_type>
    <monitor_type>
      <name>SMTP</name>
      <type>send</type>
      <descr>Generic SMTP</descr>
      <options>
        <send />
        <expect>220 *</expect>
      </options>
    </monitor_type>
  </load_balancer>
  <widgets>
    <sequence>system_information:col1:show,netgate_services_and_support:col2:show,interfaces:col2:show</sequence>
    <period>10</period>
  </widgets>
  <openvpn>
    <openvpn-client>
      <auth_user>ACCOUNTNUMBERHERE</auth_user>
      <auth_pass>M</auth_pass>
      <vpnid>1</vpnid>
      <protocol>UDP4</protocol>
      <dev_mode>tun</dev_mode>
      <interface>wan</interface>
      <ipaddr />
      <local_port />
      <server_addr>se.mullvad.net</server_addr>
      <server_port>1301</server_port>
      <proxy_addr />
      <proxy_port />
      <proxy_authtype>none</proxy_authtype>
      <proxy_user />
      <proxy_passwd />
      <description>Mullvad Sweden</description>
      <mode>p2p_tls</mode>
      <topology>subnet</topology>
      <custom_options>remote-cert-tls server</custom_options>
      <caref>5e7b2f36846ba</caref>
      <certref />
      <crlref />
      <crypto>AES-256-GCM</crypto>
      <digest>SHA384</digest>
      <engine>cryptodev</engine>
      <tunnel_network />
      <tunnel_networkv6 />
      <remote_network />
      <remote_networkv6 />
      <use_shaper />
      <compression>no</compression>
      <auth-retry-none />
      <passtos />
      <udp_fast_io>yes</udp_fast_io>
      <sndrcvbuf>1048576</sndrcvbuf>
      <route_no_pull>yes</route_no_pull>
      <route_no_exec />
      <verbosity_level>1</verbosity_level>
      <create_gw>v4only</create_gw>
      <ncp-ciphers>AES-256-GCM</ncp-ciphers>
      <ncp_enable>enabled</ncp_enable>
    </openvpn-client>
    <openvpn-client>
      <auth_user>ACCOUNTNUMBERHERE</auth_user>
      <auth_pass>M</auth_pass>
      <vpnid>2</vpnid>
      <protocol>UDP4</protocol>
      <dev_mode>tun</dev_mode>
      <interface>wan</interface>
      <ipaddr />
      <local_port />
      <server_addr>de-fra.mullvad.net</server_addr>
      <server_port>1194</server_port>
      <proxy_addr />
      <proxy_port />
      <proxy_authtype>none</proxy_authtype>
      <proxy_user />
      <proxy_passwd />
      <description>Mullvad Frankfurt</description>
      <mode>p2p_tls</mode>
      <topology>subnet</topology>
      <custom_options>remote-cert-tls server</custom_options>
      <caref>5e7b2f36846ba</caref>
      <certref />
      <crlref />
      <crypto>AES-256-GCM</crypto>
      <digest>SHA384</digest>
      <engine>cryptodev</engine>
      <tunnel_network />
      <tunnel_networkv6 />
      <remote_network />
      <remote_networkv6 />
      <use_shaper />
      <compression>no</compression>
      <auth-retry-none />
      <passtos />
      <udp_fast_io>yes</udp_fast_io>
      <sndrcvbuf>1048576</sndrcvbuf>
      <route_no_pull>yes</route_no_pull>
      <route_no_exec />
      <verbosity_level>1</verbosity_level>
      <create_gw>v4only</create_gw>
      <ncp-ciphers>AES-256-GCM</ncp-ciphers>
      <ncp_enable>enabled</ncp_enable>
    </openvpn-client>
  </openvpn>
  <dnshaper>
	</dnshaper>
  <unbound>
    <enable />
    <dnssec />
    <active_interface>all</active_interface>
    <outgoing_interface>wan</outgoing_interface>
    <custom_options />
    <hideidentity />
    <hideversion />
    <dnssecstripped />
    <port />
    <sslport />
    <sslcertref />
    <system_domain_local_zone_type>transparent</system_domain_local_zone_type>
  </unbound>
  <revision>
    <time>1577836800</time>
    <description>admin (Local Database): Firewall: Rules - saved/edited a firewall rule.</description>
    <username>admin (Local Database)</username>
  </revision>
  <ppps />
  <gateways />
  <ca>
    <refid>5e7b2f36846ba</refid>
    <descr>Mullvad CA</descr>
    <crt>[REDACTED_CERT_OR_KEY]</crt>
    <serial>0</serial>
  </ca>
  <vlans>
    <vlan>
      <if>igb2</if>
      <tag>2</tag>
      <pcp />
      <descr>VLAN2</descr>
      <vlanif>igb2.2</vlanif>
    </vlan>
    <vlan>
      <if>igb2</if>
      <tag>3</tag>
      <pcp />
      <descr>VLAN3</descr>
      <vlanif>igb2.3</vlanif>
    </vlan>
  </vlans>
</pfsense>