Firewall Filter Configuration

To configure firewall filters, you include statements at the [edit firewall] hierarchy level of the configuration:

[edit firewall]

family family-name {

    filter filter-name {

        accounting-profile name; 

        interface-specific; 

        term term-name {

            from {

                match-conditions;

            }

            then {

                action; 

                action-modifiers; 

            }

        }

    }

    service-filter filter-name {

        term term-name {

            from {

                match-conditions;

            }

            then {

                action; 

                action-modifiers; 

            }

        }

    }

}

This chapter describes the following tasks for configuring firewall filters:

• Minimum Firewall Filter Configuration
• Configuring Firewall Filters
• Configuring Service Filters
• Applying Firewall Filters to Interfaces
• Configuring Accounting
• Configuring Filter-Based Forwarding
• Configuring Forwarding Table Filters
• Configuring Firewall Filter System Logging
  

  NOTE: Stateless firewall filtering is not supported on the interfaces you configure as tunnel sources. This affects only the transit packets exiting the tunnel.