16 lines
1.0 KiB
Plaintext
16 lines
1.0 KiB
Plaintext
set interfaces lo0 unit 0 family inet filter input PROTECT_RE
|
|
set interfaces lo0 unit 0 family inet6 filter input PROTECT_RE_V6
|
|
|
|
set policy-options prefix-list BGP_PEERS_DYNAMIC apply-path "protocols bgp group <*> neighbor <*.*>"
|
|
|
|
set firewall family inet filter PROTECT_RE term ALLOW_BGP from source-prefix-list BGP_PEERS_DYNAMIC
|
|
set firewall family inet filter PROTECT_RE term ALLOW_BGP from protocol tcp
|
|
set firewall family inet filter PROTECT_RE term ALLOW_BGP from destination-port bgp
|
|
set firewall family inet filter PROTECT_RE term ALLOW_BGP then log
|
|
set firewall family inet filter PROTECT_RE term ALLOW_BGP then accept
|
|
set firewall family inet filter PROTECT_RE term BLOCK_BGP from protocol tcp
|
|
set firewall family inet filter PROTECT_RE term BLOCK_BGP from destination-port bgp
|
|
set firewall family inet filter PROTECT_RE term BLOCK_BGP then log
|
|
set firewall family inet filter PROTECT_RE term BLOCK_BGP then discard
|
|
set firewall family inet filter PROTECT_RE term DEFAULT then log
|
|
set firewall family inet filter PROTECT_RE term DEFAULT then accept |