Not working config on vSRX ## Last commit: 2015-10-30 11:01:20 UTC by root version 15.1X49-D15.4; system { services { ssh; web-management { http { interface fxp0.0; } } } syslog { user * { any emergency; } file messages { any any; authorization info; } file interactive-commands { interactive-commands any; } } license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } security { screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { source { rule-set default_nat { from zone trust; to zone untrust; rule NAT { match { source-address 10.49.0.0/23; } then { source-nat { interface; } } } } } } policies { from-zone trust to-zone trust { policy default-permit { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone untrust { policy default-permit { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone untrust to-zone trust { policy default-deny { match { source-address any; destination-address any; application any; } then { deny; } } } } zones { security-zone trust { tcp-rst; host-inbound-traffic { system-services { all; } } interfaces { ge-0/0/1.0; } } security-zone untrust { screen untrust-screen; interfaces { ge-0/0/0.0; } } } } interfaces { ge-0/0/0 { unit 0 { family inet { address 111.222.245.188/32; } } } ge-0/0/1 { unit 0 { family inet { address 10.49.0.1/24; } } } fxp0 { unit 0; } } routing-options { static { route 0.0.0.0/0 { next-hop 111.222.235.129; resolve; } route 111.222.235.128/26 next-hop 111.222.245.188; } }