All pastes #897955 Raw Edit

VoIP_Troll

public text v1 · immutable
·published 2008-02-09 23:13 UTC
rendered paste body
[edit interfaces em1 unit 0 family]
  'inet'
    Can not configure services on local RE interfaces
[edit]
  'interfaces'
    error parsing interfaces object
error: configuration check-out failed








sp-0/0/0 {
    unit 0 {
        family inet;
    }
}

em1 {
    unit 0 {
        family inet {
            service {
                input {
                    service-set stateful-firewall;
                }
                output {
                    service-set stateful-firewall;
                }
            }
        }
    }
}

stateful-firewall {
    rule lan-to-wan {
        match-direction output;
        term block-http {
            from {
                applications junos-http;
            }
            then {
                discard;
            }
        }
        term accept_rest {
            then {
                accept;
            }
        }
    }
    rule wan-to-lan {
        match-direction input;
        term allow_junos_http {
            from {
                source-address {
                    any-unicast;
                }
                destination-address {
                    1.1.1.1/32;
                }
                applications junos-http;
            }
            then {
                accept;
            }
        }
        term block_all_in {
            then {
                discard;
            }
        }
    }
}
service-set stateful-firewall {
    stateful-firewall-rules lan-to-wan;
    stateful-firewall-rules wan-to-lan;
    interface-service {
        service-interface sp-0/0/0;
    }
}