VoIP_Troll

sp-0/0/0 {
    unit 0 {
        family inet;
    }
}

em1 {
    unit 0 {
        family inet {
            service {
                input {
                    service-set stateful-firewall;
                }
                output {
                    service-set stateful-firewall;
                }
            }
        }
    }
}

stateful-firewall {
    rule lan-to-wan {
        match-direction output;
        term block-http {
            from {
                applications junos-http;
            }
            then {
                discard;
            }
        }
        term accept_rest {
            then {
                accept;
            }
        }
    }
    rule wan-to-lan {
        match-direction input;
        term allow_junos_http {
            from {
                source-address {
                    any-unicast;
                }
                destination-address {
                    1.1.1.1/32;
                }
                applications junos-http;
            }
            then {
                accept;
            }
        }
        term block_all_in {
            then {
                discard;
            }
        }
    }
}
service-set stateful-firewall {
    stateful-firewall-rules lan-to-wan;
    stateful-firewall-rules wan-to-lan;
    interface-service {
        service-interface sp-0/0/0;
    }
}