Advertisement
Guest User

Untitled

a guest
Mar 29th, 2020
225
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.67 KB | None | 0 0
  1. elcome to EdgeOS
  2.  
  3. By logging in, accessing, or using the Ubiquiti product, you
  4. acknowledge that you have read and understood the Ubiquiti
  5. License Agreement (available in the Web UI at, by default,
  6. http://192.168.1.1) and agree to be bound by its terms.
  7.  
  8. ubnt login: ubnt
  9. Password:
  10. Last login: Sun Mar 29 12:41:09 UTC 2020 from 192.168.1.112 on pts/0
  11. Linux ubnt 3.10.107-UBNT #1 SMP Mon Oct 1 12:41:38 UTC 2018 mips
  12. Welcome to EdgeOS
  13. ubnt@ubnt:~$ show configuration
  14. firewall {
  15. all-ping enable
  16. broadcast-ping disable
  17. ipv6-receive-redirects disable
  18. ipv6-src-route disable
  19. ip-src-route disable
  20. log-martians enable
  21. name WAN_IN {
  22. default-action drop
  23. description "WAN to internal"
  24. rule 10 {
  25. action accept
  26. description "Allow established/related"
  27. state {
  28. established enable
  29. related enable
  30. }
  31. }
  32. rule 20 {
  33. action drop
  34. description "Drop invalid state"
  35. state {
  36. invalid enable
  37. }
  38. }
  39. rule 21 {
  40. action accept
  41. description https
  42. destination {
  43. address 192.168.1.112
  44. port 443
  45. }
  46. log disable
  47. protocol tcp
  48. }
  49. }
  50. name WAN_LOCAL {
  51. default-action drop
  52. description "WAN to router"
  53. rule 10 {
  54. action accept
  55. description "Allow established/related"
  56. state {
  57. established enable
  58. related enable
  59. }
  60. }
  61. rule 20 {
  62. action drop
  63. description "Drop invalid state"
  64. state {
  65. invalid enable
  66. }
  67. }
  68. }
  69. receive-redirects disable
  70. send-redirects enable
  71. source-validation disable
  72. syn-cookies enable
  73. }
  74. interfaces {
  75. ethernet eth0 {
  76. address dhcp
  77. description Internet
  78. duplex auto
  79. firewall {
  80. in {
  81. name WAN_IN
  82. }
  83. local {
  84. name WAN_LOCAL
  85. }
  86. }
  87. speed auto
  88. }
  89. ethernet eth1 {
  90. description Local
  91. duplex auto
  92. speed auto
  93. }
  94. ethernet eth2 {
  95. description Local
  96. duplex auto
  97. speed auto
  98. }
  99. ethernet eth3 {
  100. description Local
  101. duplex auto
  102. speed auto
  103. }
  104. ethernet eth4 {
  105. description Local
  106. duplex auto
  107. speed auto
  108. }
  109. loopback lo {
  110. }
  111. switch switch0 {
  112. address 192.168.1.1/24
  113. description Local
  114. switch-port {
  115. interface eth1 {
  116. }
  117. interface eth2 {
  118. }
  119. interface eth3 {
  120. }
  121. interface eth4 {
  122. }
  123. }
  124. }
  125. }
  126. port-forward {
  127. auto-firewall enable
  128. hairpin-nat enable
  129. lan-interface eth1
  130. rule 1 {
  131. description ttds_1
  132. forward-to {
  133. address 192.168.1.112
  134. }
  135. original-port 10001
  136. protocol tcp_udp
  137. }
  138. rule 2 {
  139. description ttds_adv
  140. forward-to {
  141. address 192.168.1.112
  142. }
  143. original-port 3978
  144. protocol tcp_udp
  145. }
  146. rule 3 {
  147. description Apache
  148. forward-to {
  149. address 192.168.1.112
  150. }
  151. original-port 443
  152. protocol tcp_udp
  153. }
  154. rule 4 {
  155. description rt_film
  156. forward-to {
  157. address 192.168.1.112
  158. }
  159. original-port 51411
  160. protocol tcp_udp
  161. }
  162. rule 5 {
  163. description rt_serier
  164. forward-to {
  165. address 192.168.1.112
  166. }
  167. original-port 51410
  168. protocol tcp_udp
  169. }
  170. rule 6 {
  171. description rt_musik
  172. forward-to {
  173. address 192.168.1.112
  174. }
  175. original-port 51413
  176. protocol tcp_udp
  177. }
  178. rule 7 {
  179. description rt_apps
  180. forward-to {
  181. address 192.168.1.112
  182. }
  183. original-port 51412
  184. protocol tcp_udp
  185. }
  186. wan-interface eth0
  187. }
  188. service {
  189. dhcp-server {
  190. disabled false
  191. hostfile-update disable
  192. shared-network-name LAN {
  193. authoritative enable
  194. subnet 192.168.1.0/24 {
  195. default-router 192.168.1.1
  196. dns-server 192.168.1.1
  197. lease 86400
  198. start 192.168.1.38 {
  199. stop 192.168.1.243
  200. }
  201. }
  202. }
  203. }
  204. dns {
  205. forwarding {
  206. cache-size 150
  207. listen-on switch0
  208. }
  209. }
  210. gui {
  211. https-port 443
  212. }
  213. nat {
  214. rule 1 {
  215. description https443
  216. destination {
  217. address 158.174.183.159
  218. port 443
  219. }
  220. inbound-interface eth0
  221. inside-address {
  222. address 192.168.1.112
  223. port 443
  224. }
  225. log disable
  226. protocol tcp
  227. type destination
  228. }
  229. rule 2 {
  230. description hairpin443
  231. destination {
  232. address 158.174.183.159
  233. port 443
  234. }
  235. inbound-interface eth1
  236. inside-address {
  237. address 192.168.1.112
  238. port 443
  239. }
  240. log disable
  241. protocol tcp
  242. type destination
  243. }
  244. rule 5010 {
  245. description "masquerade for WAN"
  246. outbound-interface eth0
  247. type masquerade
  248. }
  249. rule 5011 {
  250. description hairpin
  251. destination {
  252. address 192.168.1.112
  253. port 443
  254. }
  255. log disable
  256. outbound-interface eth1
  257. protocol tcp
  258. source {
  259. address 192.168.1.0/24
  260. }
  261. type masquerade
  262. }
  263. }
  264. ssh {
  265. port 22
  266. protocol-version v2
  267. }
  268. }
  269. system {
  270. host-name ubnt
  271. login {
  272. user ubnt {
  273. authentication {
  274. encrypted-password ****************
  275. }
  276. level admin
  277. }
  278. }
  279. ntp {
  280. server 0.ubnt.pool.ntp.org {
  281. }
  282. server 1.ubnt.pool.ntp.org {
  283. }
  284. server 2.ubnt.pool.ntp.org {
  285. }
  286. server 3.ubnt.pool.ntp.org {
  287. }
  288. }
  289. offload {
  290. hwnat enable
  291. ipsec enable
  292. }
  293. syslog {
  294. global {
  295. facility all {
  296. level notice
  297. }
  298. facility protocols {
  299. level debug
  300. }
  301. }
  302. }
  303. time-zone UTC
  304. }
  305. ubnt@ubnt:~$
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement