Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. ipv6-receive-redirects disable
  5. ipv6-src-route disable
  6. ip-src-route disable
  7. log-martians enable
  8. name WAN_IN {
  9. default-action drop
  10. description "packets from Internet to LAN"
  11. enable-default-log
  12. rule 1 {
  13. action accept
  14. description "allow established sessions"
  15. log disable
  16. protocol all
  17. state {
  18. established enable
  19. invalid disable
  20. new disable
  21. related enable
  22. }
  23. }
  24. rule 2 {
  25. action drop
  26. description "drop invalid state"
  27. log disable
  28. protocol all
  29. state {
  30. established disable
  31. invalid enable
  32. new disable
  33. related disable
  34. }
  35. }
  36. }
  37. name WAN_LOCAL {
  38. default-action drop
  39. description "packets from Internet to the router"
  40. rule 1 {
  41. action accept
  42. description "allow established session to the router"
  43. log disable
  44. protocol all
  45. state {
  46. established enable
  47. invalid disable
  48. new disable
  49. related enable
  50. }
  51. }
  52. rule 2 {
  53. action drop
  54. description "drop invalid state"
  55. log disable
  56. protocol all
  57. state {
  58. established disable
  59. invalid enable
  60. new disable
  61. related disable
  62. }
  63. }
  64. }
  65. options {
  66. mss-clamp {
  67. interface-type pppoe
  68. interface-type pptp
  69. interface-type tun
  70. mss 1452
  71. }
  72. }
  73. receive-redirects disable
  74. send-redirects enable
  75. source-validation disable
  76. syn-cookies enable
  77. }
  78. interfaces {
  79. ethernet eth0 {
  80. address 192.168.1.1/24
  81. description LAN_ETH0
  82. duplex auto
  83. speed auto
  84. }
  85. ethernet eth1 {
  86. description ISP
  87. duplex auto
  88. speed auto
  89. vif 835 {
  90. address dhcp
  91. description ISP_DATA
  92. dhcp-options {
  93. client-option "send vendor-class-identifier "sagem";"
  94. client-option "send user-class "\047FSVDSL_livebox.MLTV.softathome.Livebox3";"
  95. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  96. default-route update
  97. default-route-distance 210
  98. name-server update
  99. }
  100. egress-qos "0:0 1:0 2:0 3:0 4:0 5:0 6:6 7:0"
  101. pppoe 0 {
  102. default-route auto
  103. firewall {
  104. in {
  105. name WAN_IN
  106. }
  107. local {
  108. name WAN_LOCAL
  109. }
  110. }
  111. mtu 1492
  112. name-server auto
  113. password XXXX
  114. user-id fti/XXXX
  115. }
  116. }
  117. vif 838 {
  118. address dhcp
  119. description ISP_TV_VOD
  120. dhcp-options {
  121. client-option "send vendor-class-identifier "sagem";"
  122. client-option "send dhcp-client-identifier 1:XXXXXXXXXXXX;"
  123. client-option "send user-class "\047FSVDSL_livebox.MLTV.softathome.Livebox3";"
  124. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  125. default-route no-update
  126. default-route-distance 210
  127. name-server update
  128. }
  129. egress-qos "0:4 1:4 2:4 3:4 4:4 5:4 6:4 7:4"
  130. }
  131. vif 840 {
  132. address 192.168.255.254/32
  133. description ISP_TV_STREAM
  134. egress-qos "0:5 1:5 2:5 3:5 4:5 5:5 6:5 7:5"
  135. }
  136. }
  137. ethernet eth2 {
  138. address 192.168.2.1/24
  139. description LAN_ETH2
  140. duplex auto
  141. speed auto
  142. }
  143. loopback lo {
  144. }
  145. }
  146. protocols {
  147. igmp-proxy {
  148. disable-quickleave
  149. interface eth0 {
  150. role disabled
  151. threshold 1
  152. }
  153. interface eth1 {
  154. role disabled
  155. threshold 1
  156. }
  157. interface eth1.835 {
  158. role disabled
  159. threshold 1
  160. }
  161. interface eth1.838 {
  162. role disabled
  163. threshold 1
  164. }
  165. interface eth1.840 {
  166. alt-subnet 0.0.0.0/0
  167. role upstream
  168. threshold 1
  169. }
  170. interface eth2 {
  171. alt-subnet 0.0.0.0/0
  172. role downstream
  173. threshold 1
  174. }
  175. }
  176. }
  177. service {
  178. dhcp-server {
  179. disabled false
  180. hostfile-update disable
  181. shared-network-name LAN_ETH0 {
  182. authoritative disable
  183. subnet 192.168.1.0/24 {
  184. default-router 192.168.1.1
  185. dns-server 192.168.1.1
  186. lease 86400
  187. start 192.168.1.2 {
  188. stop 192.168.1.99
  189. }
  190. }
  191. }
  192. shared-network-name LAN_ETH2 {
  193. authoritative enable
  194. subnet 192.168.2.0/24 {
  195. default-router 192.168.2.1
  196. dns-server 192.168.2.1
  197. lease 86400
  198. start 192.168.2.21 {
  199. stop 192.168.2.200
  200. }
  201. }
  202. }
  203. static-arp disable
  204. use-dnsmasq disable
  205. }
  206. dns {
  207. forwarding {
  208. cache-size 1000
  209. listen-on eth2
  210. listen-on eth0
  211. name-server 80.10.246.3
  212. name-server 81.253.149.10
  213. }
  214. }
  215. gui {
  216. http-port 80
  217. https-port 443
  218. older-ciphers enable
  219. }
  220. mdns {
  221. reflector
  222. }
  223. nat {
  224. rule 5010 {
  225. description "MASQ: WAN"
  226. log disable
  227. outbound-interface pppoe0
  228. protocol all
  229. type masquerade
  230. }
  231. rule 5011 {
  232. description "MASQ: ORANGE"
  233. log disable
  234. outbound-interface eth1.838
  235. protocol all
  236. type masquerade
  237. }
  238. }
  239. ssh {
  240. port 22
  241. protocol-version v2
  242. }
  243. upnp2 {
  244. listen-on eth0
  245. nat-pmp enable
  246. port 34651
  247. secure-mode disable
  248. wan pppoe0
  249. }
  250. }
  251. system {
  252. config-management {
  253. commit-revisions 50
  254. }
  255. host-name ubnt
  256. login {
  257. user ubnt {
  258. authentication {
  259. encrypted-password $1$zKNoUbAo$gomzUbYvgyUMcD436Wo66.
  260. }
  261. level admin
  262. }
  263. }
  264. name-server 8.8.8.8
  265. name-server 8.8.4.4
  266. ntp {
  267. server 0.ubnt.pool.ntp.org {
  268. }
  269. server 1.ubnt.pool.ntp.org {
  270. }
  271. server 2.ubnt.pool.ntp.org {
  272. }
  273. server 3.ubnt.pool.ntp.org {
  274. }
  275. }
  276. offload {
  277. hwnat disable
  278. ipsec enable
  279. ipv4 {
  280. forwarding enable
  281. gre enable
  282. pppoe enable
  283. vlan enable
  284. }
  285. ipv6 {
  286. forwarding enable
  287. pppoe enable
  288. }
  289. }
  290. package {
  291. repository wheezy {
  292. components "main contrib non-free"
  293. distribution wheezy
  294. password ""
  295. url http://http.us.debian.org/debian
  296. username ""
  297. }
  298. repository wheezy-security {
  299. components main
  300. distribution wheezy/updates
  301. password ""
  302. url http://security.debian.org
  303. username ""
  304. }
  305. }
  306. syslog {
  307. global {
  308. facility all {
  309. level notice
  310. }
  311. facility protocols {
  312. level warning
  313. }
  314. }
  315. }
  316. time-zone Europe/Paris
  317. }
  318.  
  319.  
  320. /* Warning: Do not remove the following line. */
  321. /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
  322. /* Release version: v1.10.5.5098915.180622.1355 */