Vyatta Configs

config.txt

 firewall {
     all-ping enable
     broadcast-ping disable
     ipv6-receive-redirects disable
     ipv6-src-route disable
     ip-src-route disable
     log-martians enable
     name WAN_IN {
         default-action drop
         description "WAN to internal"
         rule 10 {
             action accept
             description "Allow established/related"
             state {
                 established enable
                 related enable
             }
         }
         rule 20 {
             action drop
             description "Drop invalid state"
             state {
                 invalid enable
             }
         }
     }
     name WAN_LOCAL {
         default-action drop
         description "WAN to router"
         rule 10 {
             action accept
             description "Allow established/related"
             state {
                 established enable
                 related enable
             }
         }
         rule 15 {
             action accept
             description "Allow Remote WEBUI"
             destination {
                 port 443
             }
             log disable
             protocol tcp
         }
         rule 20 {
             action drop
             description "Drop invalid state"
             state {
                 invalid enable
             }
         }
     }
     options {
         mss-clamp {
             interface-type pppoe
             mss 1412
         }
     }
     receive-redirects disable
     send-redirects enable
     source-validation disable
     syn-cookies enable
 }
 interfaces {
     ethernet eth0 {
         address dhcp
         description "Internet (PPPoE)"
         duplex auto
         firewall {
             in {
                 name WAN_IN
             }
             local {
                 name WAN_LOCAL
             }
         }
         speed auto
         vif 201 {
             description "CenturyLink Fibre 201 VLAN"
             pppoe 0 {
                 default-route auto
                 mtu 1492
                 name-server auto
                 password ***
                 user-id ***
             }
         }
     }
     ethernet eth1 {
         address 192.168.0.1/22
         description Internal
         duplex auto
         speed auto
     }
     ethernet eth2 {
         address 172.16.0.1/16
         description Wireless
         duplex auto
         speed auto
     }
     loopback lo {
     }
 }
 port-forward {
     auto-firewall enable
     hairpin-nat enable
     lan-interface eth1
     lan-interface eth2
     wan-interface pppoe
 }
 service {
     dns {
         forwarding {
             cache-size 150
             listen-on eth1
             listen-on eth2
         }
     }
     nat {
         rule 5010 {
             description "masquerade for WAN"
             outbound-interface pppoe0
             type masquerade
         }
     }
     ssh {
         port 22
         protocol-version v2
     }
     upnp2 {
         acl {
             rule 10 {
                 action allow
                 description "Allow Xbox Live"
                 external-port 1024-65535
                 local-port 0-65535
                 subnet 172.16.0.1/16
             }
             rule 100 {
                 action deny
                 description "Deny All other devices"
                 external-port 1024-65535
                 local-port 0-65535
                 subnet 0.0.0.0/0
             }
         }
         listen-on eth2
         nat-pmp enable
         secure-mode enable
         wan eth0
     }
 }
 system {
     host-name ubnt
     login {
         user mike {
             authentication {
                 encrypted-password ***
             }
             level admin
         }
     }
     ntp {
         server 0.ubnt.pool.ntp.org {
         }
         server 1.ubnt.pool.ntp.org {
         }
         server 2.ubnt.pool.ntp.org {
         }
         server 3.ubnt.pool.ntp.org {
         }
     }
     offload {
         hwnat disable
         ipsec enable
         ipv4 {
             forwarding enable
             gre enable
             pppoe enable
             vlan enable
         }
         ipv6 {
             forwarding enable
             pppoe enable
         }
     }
     package {
         repository wheezy {
             components "main contrib non-free"
             distribution wheezy
             password ""
             url http://http.us.debian.org/debian
             username ""
         }
         repository wheezy-security {
             components main
             distribution wheezy/updates
             password ""
             url http://security.debian.org
             username ""
         }
     }
     static-host-mapping {
         host-name esxi01.int.reboot3times.org {
             inet 192.168.1.6
         }
         host-name esxi02.int.reboot3times.org {
             inet 192.168.1.7
         }
         host-name idrac01.int.reboot3times.org {
             inet 192.168.1.4
         }
         host-name idrac02.int.reboot3times.org {
             inet 192.168.1.5
         }
         host-name ns1.int.reboot3times.org {
             inet 192.168.1.2
         }
         host-name ns2.int.reboot3times.org {
             inet 192.168.1.3
         }
         host-name vcsa.int.reboot3times.org {
             inet 192.168.1.8
         }
     }
     syslog {
         global {
             facility all {
                 level notice
             }
             facility protocols {
                 level debug
             }
         }
     }
     time-zone UTC
     traffic-analysis {
         dpi disable
         export disable
     }
 }