From 0489b2a577e4bd6a8da9ed13ebcde6d9f5558a9b Mon Sep 17 00:00:00 2001
From: oxidized <oxidized@einsle.de>
Date: Mon, 16 Sep 2019 11:31:05 +0200
Subject: [PATCH] update opnsense/fw02.ke.einsle.de

---
 opnsense/fw02.ke.einsle.de | 21 ++++++++-------------
 1 file changed, 8 insertions(+), 13 deletions(-)

diff --git a/opnsense/fw02.ke.einsle.de b/opnsense/fw02.ke.einsle.de
index dafe306..d67627e 100644
--- a/opnsense/fw02.ke.einsle.de
+++ b/opnsense/fw02.ke.einsle.de
@@ -577,14 +577,6 @@
       <enable>1</enable>
       <spoofmac/>
     </opt11>
-    <openvpn>
-      <internal_dynamic>1</internal_dynamic>
-      <enable>1</enable>
-      <if>openvpn</if>
-      <descr>OpenVPN</descr>
-      <type>group</type>
-      <virtual>1</virtual>
-    </openvpn>
   </interfaces>
   <dhcpd>
     <lan>
@@ -1484,7 +1476,7 @@
   </widgets>
   <revision>
     <username>(root)@172.24.11.2</username>
-    <time>1568545542.0608</time>
+    <time>1568626187.5869</time>
     <description>Merged filter,OPNsense,staticroutes,gateways,virtualip,cert,ca,crl,system,schedules,widgets,unbound,openvpn,nat config sections from XMLRPC client.</description>
   </revision>
   <OPNsense>
@@ -2348,7 +2340,7 @@ PORT_mail</content>
   </wizardtemp>
   <openvpn>
     <openvpn-server>
-      <mode>server_tls_user</mode>
+      <mode>server_user</mode>
       <protocol>UDP</protocol>
       <dev_mode>tun</dev_mode>
       <local_port>1194</local_port>
@@ -2358,8 +2350,7 @@ PORT_mail</content>
       <engine>none</engine>
       <tunnel_network>172.24.21.0/24</tunnel_network>
       <local_network>172.24.0.0/16</local_network>
-      <compression>adaptive</compression>
-      <client2client>yes</client2client>
+      <compression>no</compression>
       <pool_enable>yes</pool_enable>
       <local_group>vpn</local_group>
       <dns_domain>ke.einsle.de</dns_domain>
@@ -2369,11 +2360,15 @@ PORT_mail</content>
       <dns_server4>8.8.8.8</dns_server4>
       <push_register_dns>yes</push_register_dns>
       <netbios_ntype>0</netbios_ntype>
+      <no_tun_ipv6>yes</no_tun_ipv6>
       <verbosity_level>3</verbosity_level>
       <vpnid>1</vpnid>
+      <disable>1</disable>
       <authmode>kedc01</authmode>
-      <interface>any</interface>
+      <interface>wan_vip4</interface>
+      <ipaddr>172.24.4.10</ipaddr>
       <custom_options/>
+      <tls>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</tls>
       <caref>5cbee047f2269</caref>
       <crlref>5cbee0612a417</crlref>
       <certref>5cbee09f9c702</certref>