Skip to content

Instantly share code, notes, and snippets.

@achiang
Created November 10, 2016 19:55
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save achiang/b56fc493b2e6c51aa72075752f9ba0e1 to your computer and use it in GitHub Desktop.
Save achiang/b56fc493b2e6c51aa72075752f9ba0e1 to your computer and use it in GitHub Desktop.
firewall {
all-ping enable
broadcast-ping disable
config-trap disable
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name eth0in {
default-action reject
rule 40 {
action accept
description "accept all internal traffic"
source {
address 10.113.0.0/16
}
}
rule 200 {
action drop
}
}
name eth0out {
default-action accept
}
}
interfaces {
ethernet eth0 {
address dhcp
duplex auto
firewall {
in {
name eth0in
}
out {
name eth0out
}
}
hw-id 0a:d2:b0:8e:53:f3
smp_affinity auto
speed auto
}
ethernet eth1 {
address dhcp
duplex auto
hw-id 0a:98:ae:54:33:d6
smp_affinity auto
speed auto
}
loopback lo {
}
}
nat {
source {
rule 30 {
destination {
address XX.XX.XX.XX/32
}
outbound-interface eth1
translation {
address masquerade
}
}
rule 500 {
outbound-interface eth0
source {
address 10.113.0.0/16
}
translation {
address masquerade
}
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment