<?xml version="1.0"?> <policy version="2.0"> <descs> <desc ID="1"> <networks> <net type="ipv4" addr="195.101.59.0/24" name="INTERNET" dftroute="1" id="1"/> <net type="ipv4" addr="192.168.33.0/255.255.255.128" name="DMZ" id="3" dftroute="0"/> <net type="ipv4" addr="192.168.33.128/255.255.255.128" name="INTRANET" id="4" dftroute="0"/> </networks> <addresses> <addr type="ipv4" addr="195.101.59.116" id="1"/> <addr type="ipv4" addr="192.168.33.1" iface="2" id="3"/> <addr type="ipv4" addr="192.168.33.129" iface="3" id="4"/> </addresses> <interfaces/> </desc> </descs> <periodicities/> <durations/> <resources> <resource name="internet" ID="1"> <elt name="0.0.0.0" net="0.0.0.0/0" modified="Thu 24 May 2007" type="ipv4" ID="8"/> </resource> <resource name="LAN" ID="6"> <elt name="users" net="192.168.33.128/25" modified="Thu 24 May 2007" type="ipv4" ID="13"/> <elt name="dmz" net="192.168.33.0/25" modified="Thu 24 May 2007" type="ipv4" ID="14"/> </resource> </resources> <auths/> <applications/> <oss/> <protocols> <protocol name="HTTP" ID="1"> <elt name="tcp_80" proto="tcp" dport="80" sport="1024:65535" modified="Thu 24 May 2007" type="proto" ID="187"/> </protocol> <protocol name="HTTPS" ID="2"> <elt name="tcp_443" proto="tcp" dport="443" sport="1024:65535" modified="Thu 24 May 2007" type="proto" ID="188"/> </protocol> </protocols> <l7rules mask="0x007f0000"/> <localsin/> <acls> <acl name="http lan vers internet" from="6" to="1" auth="0" proto="1" ID="1" decision="accept" comment="" modified="Tue 28 Aug 2007" group="1"> <descsorts> <descsort ID="1"> <elt from="4" to="1" order="2" ID="7"/> <elt from="3" to="1" order="1" ID="8"/> </descsort> </descsorts> </acl> <acl name="https lan vers internet" from="6" to="1" auth="0" proto="2" ID="2" decision="accept" comment="" modified="Tue 28 Aug 2007" group="1"> <descsorts> <descsort ID="1"> <elt from="4" to="1" order="1" ID="9"/> <elt from="3" to="1" order="2" ID="10"/> </descsort> </descsorts> </acl> </acls> <snats/> <dnats/> <pnats/> <groups> <group name="default" ID="1" comment="" enabled="1"/> </groups> </policy>