Some SmallWall options are only accessible by modifying config.xml directly. This is usually the case for strange/exotic options that only few people (should) use. Instead of cluttering the webGUI with lots of options that almost nobody really uses, they can only be set in config.xml. For the ultimate reference on all available options in config.xml, download your own from your firewall using the exec.php page to download the file /conf.default/config.xml , or get the latest tarball of the filesystem available at http://www.smallwall.org/downloads/SmallWall-fs.tar.gz.
To put in these options, download your config.xml via the backup feature and open it in a text editor. Put in the desired options in the appropriate location in the file, as shown in the default config.xml linked above. After saving your desired changes, use the restore feature in SmallWall to restore the changed configuration.
Some options are documented below:
system/webgui/noassigninterfaces
hides the "assign interfaces" link in the navigation bar
system/earlyshellcmd and system/shellcmd
may contain a shell command that is executed before the boot scripts actually start setting up the system (for earlyshellcmd), or after the boot scripts have finished setting up the system (for shellcmd). You can have multiple (early)shellcmd tags. Don't forget to replace special characters with their XML equivalents (most notably < and > (< and >).
interfaces/(if)/media and interfaces/(if)/mediaopt
If you need to force your NIC to a specific media type (e.g. 10Base-T half duplex), you can use these two options. Refer to the appropriate FreeBSD manpage for the driver you're using to see which options are available (or run ifconfig -m).
dhcpd/(if)/gateway
Allows you to specify a custom gateway to assign to DHCP clients (instead of SmallWall's IP address on the corresponding interface)
dhcpd/(if)/domain
Assigns a custom domain name to DHCP clients (instead of the one configured on System: General setup)
dhcpd/(if)/dnsserver
Assigns custom DNS servers to DHCP clients (instead of SmallWall's IP address if the DNS forwarder is enabled, or the DNS servers configured on System: General setup otherwise)
This is often needed for Microsoft Active Directory to function properly.