ubnt@ubnt:~$ show configuration firewall { all-ping enable broadcast-ping disable ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable name LAN_IN { default-action accept rule 1 { action reject application { category P2P } description "Send TCP RST for P2P" destination { } log disable protocol tcp source { } } rule 2 { action reject application { category P2P } description "Send ICMP unreachable for P2P" log disable } } name WAN_IN { default-action drop description "WAN to internal" rule 1 { action accept description "Allow established/related" state { established enable related enable } } rule 2 { action drop description "Drop invalid state" state { invalid enable } } } name WAN_LOCAL { default-action drop description "WAN to router" rule 1 { action accept description "Allow established/related" state { established enable related enable } } rule 2 { action drop description "Drop invalid state" state { invalid enable } } rule 3 { action accept description "Inbound traffic to WEB GUI" destination { port 8888 } log disable protocol tcp_udp } rule 4 { action accept description "Access to SSH internet" destination { port 22 } disable log disable protocol tcp } } name WAN_OUT { default-action accept description "" rule 1 { action reject application { category P2P } description "Send TCP RST for P2P" destination { } log disable protocol tcp source { group { } } } rule 2 { action reject application { category P2P } description "Send ICMP unreachable for P2P" log disable } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address dhcp description Internet duplex auto firewall { in { name WAN_IN } local { name WAN_LOCAL } out { name WAN_OUT } } speed auto } ethernet eth1 { address 192.168.0.1/24 description Local duplex auto firewall { in { name LAN_IN } } speed auto } ethernet eth2 { address 192.168.1.1/24 description "Local 2" duplex auto speed auto } loopback lo { } } dhcp-server { disabled false hostfile-update disable shared-network-name LAN1 { authoritative disable subnet 192.168.0.0/24 { default-router 192.168.0.1 dns-server 192.168.0.1 dns-server 8.8.8.8 lease 600 start 192.168.0.70 { stop 192.168.0.243 } dns { forwarding { cache-size 150 listen-on eth1 listen-on eth2 listen-on eth0 } } gui { https-port 8888 } nat { rule 5010 { description "masquerade for WAN" outbound-interface eth0 type masquerade } } ssh { port 22 protocol-version v2 } webproxy { domain-block porno.com listen-address 192.168.0.1 { } } } system { host-name ubnt login { user admin { authentication { encrypted-password **************** plaintext-password **************** } level operator } user ubnt { authentication { encrypted-password **************** plaintext-password **************** } full-name "" level admin } } ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } offload { ipv4 { vlan enable } ipv6 { forwarding enable } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone Europe/Samara traffic-analysis { custom-category uTorrBlock { name uTorrent name "BitTorrent Series" } dpi enable export enable } } ubnt@ubnt:~$