vyatta@vyatta# show firewall name Intranet_Firewall
 rule 100 {
     action reject
     description "Block all traffic from Office to Web"
     destination {
         address 10.12.12.0/24
     }
     source {
         address 10.11.11.0/24
     }
 }
 rule 200 {
     action reject
     description "Block all traffic from Web to Office"
     destination {
         address 10.11.11.0/24
     }
     source {
         address 10.12.12.0/24
     }
 }
 rule 1024 {
     action accept
 }

vyatta@vyatta# show interfaces ethernet
 eth1 {
     address 10.11.11.1/24
     description On-board
     firewall {
         in {
             name Intranet_Firewall
         }
     }
     hw-id 00:21:97:d2:62:0c
 }
 eth2 {
     address 10.12.12.1/24
     description Middle
     firewall {
         in {
             name Intranet_Firewall
         }
     }
     hw-id 00:0a:cd:18:39:b6
 }