Policy Framework Configuration Guide - Juniper Networks

Chapter 9: Firewall Filter Configuration
count strict-source-route;
log;
accept;
}
}
term match-loose-source {
from {
ip-options loose-source-route;
}
then {
count loose-source-route;
log;
accept;
}
}
term match-record {
from {
ip-options record-route;
}
then {
count record-route;
accept;
}
}
term match-timestamp {
from {
ip-options timestamp;
}
then {
count timestamp;
accept;
}
}
term match-router-alert {
from {
ip-options router-alert;
}
then {
count router-alert;
accept;
}
}
term match-all {
then accept;
}
}
}
}
Example: Counting and Discarding IP Options Packets
Count packets that include any IP options header fields and discard the packets. Accept
all other packets.
[edit firewall]
Copyright © 2010, Juniper Networks, Inc.
247