From d985a0722862df8c158cece5f3a6d6787eb99506 Mon Sep 17 00:00:00 2001
From: None <None>
Date: Mon, 24 Aug 2026 14:08:29 +0200
Subject: [PATCH] /api/firewall/filter/add_rule made changes @
 2026-08-24T14:08:28.990000 (mcp_user@10.0.0.16)

---
 config.xml | 70 ++++++++++++++++++++++++++++++++++++++++++++++++++----
 1 file changed, 65 insertions(+), 5 deletions(-)

diff --git a/config.xml b/config.xml
index 4686cee..fcc94dd 100644
--- a/config.xml
+++ b/config.xml
@@ -1191,9 +1191,10 @@ eB5vhzf2Buj0CaEaqDF/dVMuss6x++eHeWqU3Ss2s13VFsJkelWwByxcTKJha4s34dYXWByMDAO4cXzm
     <traffic_graphs_interfaces>wan</traffic_graphs_interfaces>
   </widgets>
   <revision>
-    <username>(root)</username>
-    <description>/tmp/opnsense_create_key.php made changes</description>
-    <time>1787570636.48</time>
+    <username>mcp_user@10.0.0.16</username>
+    <user_apitoken>eB5vhzf2Buj0CaEaqDF/dVMuss6x++eHeWqU3Ss2s13VFsJkelWwByxcTKJha4s34dYXWByMDAO4cXzm</user_apitoken>
+    <description>/api/firewall/filter/add_rule made changes</description>
+    <time>1787573308.99</time>
   </revision>
   <OPNsense>
     <wireguard>
@@ -1402,9 +1403,68 @@ RU</content>
       <Category version="1.0.0">
         <categories/>
       </Category>
-      <Filter version="1.0.5" persisted_at="1783189828.77" description="Firewall rules (new)">
+      <Filter version="1.0.5" persisted_at="1787573308.99" description="Firewall rules (new)">
         <general/>
-        <rules/>
+        <rules>
+          <rule uuid="91ac330c-91d4-4529-9902-0298b353a77f">
+            <enabled>1</enabled>
+            <statetype>keep</statetype>
+            <state-policy/>
+            <sequence>100</sequence>
+            <action>block</action>
+            <quick>1</quick>
+            <interfacenot>0</interfacenot>
+            <interface>wan</interface>
+            <direction>in</direction>
+            <ipprotocol>inet</ipprotocol>
+            <protocol>any</protocol>
+            <icmptype/>
+            <icmp6type/>
+            <source_net>PAYS_BLOQUES</source_net>
+            <source_not>0</source_not>
+            <source_port/>
+            <destination_net>any</destination_net>
+            <destination_not>0</destination_not>
+            <destination_port/>
+            <divert-to/>
+            <gateway/>
+            <replyto/>
+            <disablereplyto>0</disablereplyto>
+            <log>1</log>
+            <allowopts>0</allowopts>
+            <nosync>0</nosync>
+            <nopfsync>0</nopfsync>
+            <statetimeout/>
+            <udp-first/>
+            <udp-multiple/>
+            <udp-single/>
+            <max-src-nodes/>
+            <max-src-states/>
+            <max-src-conn/>
+            <max/>
+            <max-src-conn-rate/>
+            <max-src-conn-rates/>
+            <max-pkt-rate-number/>
+            <max-pkt-rate-seconds/>
+            <overload/>
+            <adaptivestart/>
+            <adaptiveend/>
+            <prio/>
+            <set-prio/>
+            <set-prio-low/>
+            <tag/>
+            <tagged/>
+            <tcpflags1/>
+            <tcpflags2/>
+            <tcpflags_any>0</tcpflags_any>
+            <categories/>
+            <sched/>
+            <tos/>
+            <shaper1/>
+            <shaper2/>
+            <description>GeoIP WAN block pays bloqu&#xE9;s</description>
+          </rule>
+        </rules>
         <snatrules/>
         <npt/>
         <onetoone/>