API tools faq
paste
Guest User

Untitled

a guest
Oct 27th, 2021
95
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.21 KB | None | 0 0
raw download clone embed print report
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. ipv6-name WANv6_IN {
  5. default-action drop
  6. description "WAN inbound traffic forwarded to LAN"
  7. enable-default-log
  8. rule 1 {
  9. action accept
  10. description "Allow established/related sessions"
  11. state {
  12. established enable
  13. related enable
  14. }
  15. }
  16. rule 2 {
  17. action drop
  18. description "Drop invalid state"
  19. state {
  20. invalid enable
  21. }
  22. }
  23. rule 3 {
  24. action accept
  25. description "allow ICMPv6"
  26. log enable
  27. protocol icmpv6
  28. }
  29. rule 4 {
  30. action accept
  31. description "Allow DHCPv6"
  32. destination {
  33. port 546
  34. }
  35. protocol udp
  36. source {
  37. port 547
  38. }
  39. }
  40. }
  41. ipv6-name WANv6_LOCAL {
  42. default-action drop
  43. description "WAN IPv6 naar Router"
  44. enable-default-log
  45. rule 1 {
  46. action accept
  47. description "Allow established/related sessions"
  48. state {
  49. established enable
  50. related enable
  51. }
  52. }
  53. rule 2 {
  54. action drop
  55. description "Drop invalid state"
  56. log enable
  57. state {
  58. invalid enable
  59. }
  60. }
  61. rule 3 {
  62. action accept
  63. description "Allow IPv6 icmp"
  64. log enable
  65. protocol icmpv6
  66. }
  67. rule 4 {
  68. action accept
  69. description "allow dhcpv6"
  70. destination {
  71. port 546
  72. }
  73. log enable
  74. protocol udp
  75. source {
  76. port 547
  77. }
  78. }
  79. }
  80. ipv6-receive-redirects disable
  81. ipv6-src-route disable
  82. ip-src-route disable
  83. log-martians enable
  84. name WAN_IN {
  85. default-action drop
  86. description "WAN to internal"
  87. rule 10 {
  88. action accept
  89. description "Allow established/related"
  90. state {
  91. established enable
  92. invalid disable
  93. new disable
  94. related enable
  95. }
  96. }
  97. rule 20 {
  98. action drop
  99. description "Drop invalid state"
  100. state {
  101. established disable
  102. invalid enable
  103. new disable
  104. related disable
  105. }
  106. }
  107. }
  108. name WAN_LOCAL {
  109. default-action drop
  110. description "WAN to router"
  111. rule 5 {
  112. action accept
  113. description "Enable Ping"
  114. limit {
  115. burst 1
  116. rate 90/minute
  117. }
  118. protocol icmp
  119. }
  120. rule 10 {
  121. action accept
  122. description "Allow established/related"
  123. state {
  124. established enable
  125. related enable
  126. }
  127. }
  128. rule 20 {
  129. action drop
  130. description "Drop invalid state"
  131. state {
  132. invalid enable
  133. }
  134. }
  135. }
  136. receive-redirects disable
  137. send-redirects enable
  138. source-validation disable
  139. syn-cookies enable
  140. }
  141. interfaces {
  142. ethernet eth0 {
  143. description Local
  144. duplex auto
  145. speed auto
  146. }
  147. ethernet eth1 {
  148. description Local
  149. duplex auto
  150. speed auto
  151. }
  152. ethernet eth2 {
  153. description Local
  154. duplex auto
  155. speed auto
  156. }
  157. ethernet eth3 {
  158. description Local
  159. duplex auto
  160. speed auto
  161. }
  162. ethernet eth4 {
  163. duplex auto
  164. mtu 1512
  165. speed auto
  166. vif 32 {
  167. description "Internet (PPPoE)"
  168. mtu 1508
  169. pppoe 0 {
  170. default-route auto
  171. dhcpv6-pd {
  172. no-dns
  173. pd 0 {
  174. interface switch0 {
  175. host-address ::1
  176. prefix-id :0
  177. service slaac
  178. }
  179. prefix-length /56
  180. }
  181. prefix-only
  182. rapid-commit enable
  183. }
  184. firewall {
  185. in {
  186. ipv6-name WANv6_IN
  187. name WAN_IN
  188. }
  189. local {
  190. ipv6-name WANv6_LOCAL
  191. name WAN_LOCAL
  192. }
  193. }
  194. idle-timeout 180
  195. ipv6 {
  196. dup-addr-detect-transmits 1
  197. enable {
  198. }
  199. }
  200. mtu 1500
  201. name-server auto
  202. password <pass>
  203. user-id <user-id>
  204. }
  205. }
  206. }
  207. loopback lo {
  208. }
  209. switch switch0 {
  210. address 192.168.30.1/24
  211. description "Thuis netwerk"
  212. ipv6 {
  213. dup-addr-detect-transmits 1
  214. router-advert {
  215. cur-hop-limit 64
  216. link-mtu 0
  217. managed-flag true
  218. max-interval 600
  219. other-config-flag false
  220. prefix ::/64 {
  221. autonomous-flag true
  222. on-link-flag true
  223. valid-lifetime 7200
  224. }
  225. reachable-time 0
  226. retrans-timer 0
  227. send-advert true
  228. }
  229. }
  230. mtu 1500
  231. switch-port {
  232. interface eth0 {
  233. }
  234. interface eth1 {
  235. }
  236. interface eth2 {
  237. }
  238. interface eth3 {
  239. }
  240. vlan-aware disable
  241. }
  242. }
  243. }
  244. port-forward {
  245. auto-firewall enable
  246. hairpin-nat enable
  247. lan-interface switch0
  248. rule 1 {
  249. description "Synology HTTP"
  250. forward-to {
  251. address 192.168.30.2
  252. port 80
  253. }
  254. original-port 80
  255. protocol tcp
  256. }
  257. rule 2 {
  258. description "Synology HTTPS"
  259. forward-to {
  260. address 192.168.30.2
  261. port 443
  262. }
  263. original-port 443
  264. protocol tcp
  265. }
  266. rule 3 {
  267. description "Synology Websocket"
  268. forward-to {
  269. address 192.168.30.2
  270. port 3012
  271. }
  272. original-port 3012
  273. protocol tcp_udp
  274. }
  275. rule 4 {
  276. description "Synology DSMs"
  277. forward-to {
  278. address 192.168.30.2
  279. port 5001
  280. }
  281. original-port 5001
  282. protocol tcp
  283. }
  284. wan-interface pppoe0
  285. }
  286. protocols {
  287. static {
  288. interface-route6 ::/0 {
  289. next-hop-interface pppoe0 {
  290. }
  291. }
  292. }
  293. }
  294. service {
  295. dhcp-server {
  296. disabled false
  297. hostfile-update disable
  298. shared-network-name LAN {
  299. authoritative enable
  300. subnet 192.168.30.0/24 {
  301. default-router 192.168.30.1
  302. dns-server 192.168.30.3
  303. lease 86400
  304. start 192.168.30.38 {
  305. stop 192.168.30.243
  306. }
  307. }
  308. }
  309. static-arp disable
  310. use-dnsmasq disable
  311. }
  312. dns {
  313. forwarding {
  314. cache-size 150
  315. listen-on switch0
  316. }
  317. }
  318. gui {
  319. http-port 80
  320. https-port 443
  321. older-ciphers enable
  322. }
  323. nat {
  324. rule 5010 {
  325. description "masquerade for WAN"
  326. outbound-interface pppoe0
  327. type masquerade
  328. }
  329. }
  330. ssh {
  331. port 22
  332. protocol-version v2
  333. }
  334. unms {
  335. disable
  336. }
  337. }
  338. system {
  339. analytics-handler {
  340. send-analytics-report false
  341. }
  342. crash-handler {
  343. send-crash-report false
  344. }
  345. host-name ubnt
  346. login {
  347. }
  348. ntp {
  349. server 0.ubnt.pool.ntp.org {
  350. }
  351. server 1.ubnt.pool.ntp.org {
  352. }
  353. server 2.ubnt.pool.ntp.org {
  354. }
  355. server 3.ubnt.pool.ntp.org {
  356. }
  357. }
  358. offload {
  359. hwnat enable
  360. }
  361. syslog {
  362. global {
  363. facility all {
  364. level notice
  365. }
  366. facility protocols {
  367. level debug
  368. }
  369. }
  370. host 192.168.30.2 {
  371. facility all {
  372. level debug
  373. }
  374. }
  375. }
  376. time-zone Europe/Amsterdam
  377. }
  378.  
  379.  
  380. /* Warning: Do not remove the following line. */
  381. /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:suspend@1:system@5:ubnt-l2tp@1:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@2:ubnt-util@1:vrrp@1:vyatta-netflow@1:webgui@1:webproxy@1:zone-policy@1" === */
  382. /* Release version: v2.0.9-hotfix.2.5402463.210511.1317 */
  383.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!