API tools faq
paste
Guest User

Untitled

a guest
Jun 9th, 2020
99
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 40.23 KB | None | 0 0
raw download clone embed print report
  1.  
  2. admin@Thuis:~$ show configuration | no-more
  3. firewall {
  4. all-ping enable
  5. broadcast-ping disable
  6. ipv6-name WANv6_IN {
  7. default-action drop
  8. description "WAN IPv6 naar LAN"
  9. rule 10 {
  10. action accept
  11. description "Allow established/related"
  12. state {
  13. established enable
  14. related enable
  15. }
  16. }
  17. rule 20 {
  18. action drop
  19. description "Drop invalid state"
  20. state {
  21. invalid enable
  22. }
  23. }
  24. rule 30 {
  25. action accept
  26. description "Allow IPv6 icmp"
  27. icmpv6 {
  28. type echo-request
  29. }
  30. protocol ipv6-icmp
  31. }
  32. }
  33. ipv6-name WANv6_LOCAL {
  34. default-action drop
  35. description "WAN IPv6 naar Router"
  36. rule 10 {
  37. action accept
  38. description "Allow established/related"
  39. state {
  40. established enable
  41. related enable
  42. }
  43. }
  44. rule 20 {
  45. action drop
  46. description "Drop invalid state"
  47. state {
  48. invalid enable
  49. }
  50. }
  51. rule 30 {
  52. action accept
  53. description "Allow IPv6 icmp"
  54. protocol ipv6-icmp
  55. }
  56. rule 40 {
  57. action accept
  58. description "Allow dhcpv6"
  59. destination {
  60. port 546
  61. }
  62. protocol udp
  63. source {
  64. port 547
  65. }
  66. }
  67. }
  68. ipv6-receive-redirects disable
  69. ipv6-src-route disable
  70. ip-src-route disable
  71. log-martians enable
  72. name WAN_IN {
  73. default-action drop
  74. description "WAN naar LAN"
  75. rule 10 {
  76. action accept
  77. description "Allow established/related"
  78. log disable
  79. state {
  80. established enable
  81. related enable
  82. }
  83. }
  84. rule 20 {
  85. action drop
  86. description "Drop invalid state"
  87. state {
  88. invalid enable
  89. }
  90. }
  91. }
  92. name WAN_LOCAL {
  93. default-action drop
  94. description "WAN naar Router"
  95. rule 10 {
  96. action accept
  97. description "Allow established/related"
  98. log disable
  99. state {
  100. established enable
  101. invalid disable
  102. new disable
  103. related enable
  104. }
  105. }
  106. rule 20 {
  107. action drop
  108. description "Drop invalid state"
  109. state {
  110. established disable
  111. invalid enable
  112. new disable
  113. related disable
  114. }
  115. }
  116. }
  117. receive-redirects disable
  118. send-redirects enable
  119. source-validation disable
  120. syn-cookies enable
  121. }
  122. interfaces {
  123. ethernet eth0 {
  124. description FTTH
  125. duplex auto
  126. mtu 1512
  127. speed auto
  128. vif 4 {
  129. address dhcp
  130. description "KPN IPTV"
  131. dhcp-options {
  132. client-option "send vendor-class-identifier "IPTV_RG";
  133. "
  134. client-option "request subnet-mask, routers, rfc3442-classless-s
  135. tatic-routes;"
  136. default-route no-update
  137. default-route-distance 210
  138. name-server update
  139. }
  140. mtu 1500
  141. }
  142. vif 6 {
  143. description "KPN Internet"
  144. mtu 1508
  145. pppoe 0 {
  146. default-route auto
  147. dhcpv6-pd {
  148. no-dns
  149. pd 0 {
  150. interface switch0 {
  151. host-address ::1
  152. prefix-id :1
  153. service slaac
  154. }
  155. prefix-length /48
  156. }
  157. rapid-commit enable
  158. }
  159. firewall {
  160. in {
  161. ipv6-name WANv6_IN
  162. name WAN_IN
  163. }
  164. local {
  165. ipv6-name WANv6_LOCAL
  166. name WAN_LOCAL
  167. }
  168. }
  169. idle-timeout 180
  170. ipv6 {
  171. address {
  172. autoconf
  173. }
  174. dup-addr-detect-transmits 1
  175. enable {
  176. }
  177. }
  178. mtu 1500
  179. name-server auto
  180. password ****************
  181. user-id 74-83-c2-72-b2-e7@internet
  182. }
  183. }
  184. }
  185. ethernet eth1 {
  186. description "Poort 1 TV ontvanger"
  187. duplex auto
  188. speed auto
  189. }
  190. ethernet eth2 {
  191. description "Poort 2 TV woonkamer"
  192. duplex auto
  193. speed auto
  194. }
  195. ethernet eth3 {
  196. description "Poort 3 gaming pc woonkamer"
  197. duplex auto
  198. speed auto
  199. }
  200. ethernet eth4 {
  201. description "Poort 4 Accesspoint woonkamer"
  202. duplex auto
  203. speed auto
  204. }
  205. ethernet eth5 {
  206. description "Poort 5 uplink 2e verdieping switch"
  207. duplex auto
  208. speed auto
  209. }
  210. ethernet eth6 {
  211. duplex auto
  212. speed auto
  213. }
  214. ethernet eth7 {
  215. duplex auto
  216. speed auto
  217. }
  218. ethernet eth8 {
  219. duplex auto
  220. speed auto
  221. }
  222. ethernet eth9 {
  223. description "Poort 9 Accesspoint 2de verdieping"
  224. duplex auto
  225. poe {
  226. output off
  227. }
  228. speed auto
  229. }
  230. loopback lo {
  231. }
  232. switch switch0 {
  233. address 192.168.178.254/24
  234. description "Thuis netwerk"
  235. ipv6 {
  236. dup-addr-detect-transmits 1
  237. router-advert {
  238. cur-hop-limit 64
  239. link-mtu 0
  240. managed-flag false
  241. max-interval 600
  242. name-server 2a02:a47f:e000::53
  243. name-server 2a02:a47f:e000::54
  244. other-config-flag false
  245. prefix ::/64 {
  246. autonomous-flag true
  247. on-link-flag true
  248. valid-lifetime 2592000
  249. }
  250. radvd-options "RDNSS 2a02:a47f:e000::53 2a02:a47f:e000::54 {};"
  251. reachable-time 0
  252. retrans-timer 0
  253. send-advert true
  254. }
  255. }
  256. mtu 1500
  257. switch-port {
  258. interface eth1 {
  259. }
  260. interface eth2 {
  261. }
  262. interface eth3 {
  263. }
  264. interface eth4 {
  265. }
  266. interface eth5 {
  267. }
  268. interface eth6 {
  269. }
  270. interface eth7 {
  271. }
  272. interface eth8 {
  273. }
  274. interface eth9 {
  275. }
  276. vlan-aware disable
  277. }
  278. }
  279. }
  280. port-forward {
  281. auto-firewall enable
  282. hairpin-nat enable
  283. lan-interface switch0
  284. rule 1 {
  285. description "CSGO s01 port"
  286. forward-to {
  287. address 192.168.178.10
  288. port 27015
  289. }
  290. original-port 27015
  291. protocol tcp_udp
  292. }
  293. rule 2 {
  294. description "TeamSpeak s01 port"
  295. forward-to {
  296. address 192.168.178.10
  297. port 9987
  298. }
  299. original-port 9987
  300. protocol tcp_udp
  301. }
  302. rule 3 {
  303. description "http s01 port"
  304. forward-to {
  305. address 192.168.178.10
  306. port 80
  307. }
  308. original-port 80
  309. protocol tcp_udp
  310. }
  311. rule 4 {
  312. description "https s01 port"
  313. forward-to {
  314. address 192.168.178.10
  315. port 443
  316. }
  317. original-port 443
  318. protocol tcp_udp
  319. }
  320. rule 5 {
  321. description "ftp s01"
  322. forward-to {
  323. address 192.168.178.10
  324. port 21
  325. }
  326. original-port 21
  327. protocol tcp_udp
  328. }
  329. wan-interface pppoe0
  330. }
  331. protocols {
  332. igmp-proxy {
  333. interface eth0.4 {
  334. alt-subnet 0.0.0.0/0
  335. role upstream
  336. threshold 1
  337. }
  338. interface switch0 {
  339. alt-subnet 0.0.0.0/0
  340. role downstream
  341. threshold 1
  342. }
  343. }
  344. static {
  345. interface-route6 ::/0 {
  346. next-hop-interface pppoe0 {
  347. }
  348. }
  349. }
  350. }
  351. service {
  352. dhcp-server {
  353. disabled false
  354. hostfile-update disable
  355. shared-network-name Thuis {
  356. authoritative disable
  357. subnet 192.168.178.0/24 {
  358. default-router 192.168.178.254
  359. dns-server 192.168.178.12
  360. dns-server 195.121.1.66
  361. lease 86400
  362. start 192.168.178.50 {
  363. stop 192.168.178.199
  364. }
  365. }
  366. }
  367. static-arp disable
  368. use-dnsmasq disable
  369. }
  370. dns {
  371. forwarding {
  372. cache-size 4000
  373. listen-on switch0
  374. name-server 195.121.1.34
  375. name-server 195.121.1.66
  376. name-server 2a02:a47f:e000::53
  377. name-server 2a02:a47f:e000::54
  378. options listen-address=192.168.2.254
  379. }
  380. }
  381. gui {
  382. http-port 80
  383. https-port 443
  384. older-ciphers enable
  385. }
  386. nat {
  387. rule 5000 {
  388. description IPTV
  389. destination {
  390. address 213.75.112.0/21
  391. }
  392. log disable
  393. outbound-interface eth0.4
  394. protocol all
  395. source {
  396. address 192.168.2.0/24
  397. }
  398. type masquerade
  399. }
  400. rule 5010 {
  401. description Internet
  402. log disable
  403. outbound-interface pppoe0
  404. protocol all
  405. type masquerade
  406. }
  407. }
  408. ssh {
  409. port 22
  410. protocol-version v2
  411. }
  412. telnet {
  413. port 23
  414. }
  415. unms {
  416. connection wss://fuuv.unmsapp.com:443+jPl-KLNm_NmUFVXgLpvB8u0Yf8huRUyZKK
  417. Qu2dAjVBwAAAAA+allowUntrustedCertificate
  418. }
  419. }
  420. system {
  421. conntrack {
  422. modules {
  423. sip {
  424. disable
  425. }
  426. }
  427. }
  428. domain-name thuis.local
  429. flow-accounting {
  430. disable-memory-table
  431. ingress-capture post-dnat
  432. interface eth0
  433. netflow {
  434. enable-egress {
  435. engine-id 51
  436. }
  437. engine-id 50
  438. server 161.35.129.148 {
  439. port 2055
  440. }
  441. timeout {
  442. expiry-interval 60
  443. flow-generic 60
  444. icmp 60
  445. max-active-life 60
  446. tcp-fin 10
  447. tcp-generic 60
  448. tcp-rst 10
  449. udp 60
  450. }
  451. version 9
  452. }
  453. syslog-facility daemon
  454. }
  455. host-name Thuis
  456. login {
  457. user admin {
  458. authentication {
  459. encrypted-password ****************
  460. plaintext-password ****************
  461. }
  462. full-name admin
  463. level admin
  464. }
  465. }
  466. name-server 127.0.0.1
  467. ntp {
  468. server 0.nl.pool.ntp.org {
  469. }
  470. server 1.nl.pool.ntp.org {
  471. }
  472. server ntp0.nl.net {
  473. }
  474. server ntp1.nl.net {
  475. }
  476. server time.kpn.net {
  477. }
  478. }
  479. offload {
  480. hwnat enable
  481. }
  482. syslog {
  483. global {
  484. facility all {
  485. level notice
  486. }
  487. facility protocols {
  488. level debug
  489. }
  490. }
  491. }
  492. time-zone Europe/Amsterdam
  493. traffic-analysis {
  494. dpi enable
  495. export enable
  496. }
  497. }
  498. traffic-control {
  499. optimized-queue {
  500. policy global
  501. policy queues
  502. }
  503. }
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!