vyatta@vyatta:~$ show configuration firewall { all-ping enable broadcast-ping disable config-trap disable ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable name internet-in { default-action drop rule 10 { action accept state { established enable related enable } } } name internet-local { default-action drop rule 10 { action accept state { established enable related enable } } rule 20 { action accept icmp { type-name echo-request } protocol icmp state { new enable } } rule 30 { action drop destination { port 22 } protocol tcp recent { count 4 time 60 } state { new enable } } rule 31 { action accept destination { port 22 } protocol tcp state { new enable } } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address INTERNET_STATIC_IP/SUBNET_MASK description WAN duplex auto firewall { in { name internet-in } local { name internet-local } } hw-id 00:1b:21:bc:c3:18 smp_affinity auto speed auto } ethernet eth1 { address 192.168.0.1/24 description LAN duplex auto hw-id 00:1b:21:bc:c3:1a smp_affinity auto speed auto } } nat { source { rule 100 { outbound-interface eth0 source { address 192.168.0.0/24 } translation { address masquerade } } } } protocols { \ route 0.0.0.0/0 { next-hop GATEWAYIP { } } } } service { dhcp-server { disabled false shared-network-name LAN { authoritative disable subnet 192.168.0.0/24 { default-router 192.168.0.1 dns-server 192.168.0.1 lease 86400 start 192.168.0.10 { stop 192.168.0.254 } } } } dns { forwarding { cache-size 0 listen-on eth1 name-server 8.8.8.8 name-server 8.8.4.4 } } ssh { port 22 } } system { host-name vyatta login { user admin { authentication { encrypted-password **************** } level admin } } syslog { global { facility all { level notice } facility protocols { level debug } } user all { facility all { level emerg } } } time-zone GMT } vyatta@vyatta:~$