Discussion

protocol tcp;
destination-port [ telnet ssh ];
}
then accept;
}
term restrict-bgp {
from {
source-address {
10.0.31.0/24;
}
protocol tcp;
port bgp;
}
then accept;
}
Use the insert command to rearrange the terms. The command in this recipe moves
the restrict-bgp term so that it precedes the restrict-telnet-ssh term. Check that
the order is what you expect:
[edit firewall filter incoming-to-me]
aviva@RouterF# show
term restrict-bgp {
from {
source-address {
10.0.31.0/24;
}
protocol tcp;
port bgp;
}
then accept;
}
term restrict-telnet-ssh {
from {
source-address {
10.0.0.0/8;
}
protocol tcp;
destination-port [ telnet ssh ];
}
then accept;
}
9.11 Filtering Traffic Transiting the Router
Problem
For traffic transiting through the router, you want to accept packets only from
trusted hosts and routers.
Filtering Traffic Transiting the Router | 311
This is the Title of the Book, eMatter Edition
Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.