Firewall Filter Configuration > Configuring Service Filters

A service filter identifies packets on which services need to be applied. The service filter also identifies the Physical Interface Card (PIC) performing the service. To configure service filters, include the firewall statement at the [edit] hierarchy level:

[edit]

firewall {

    family inet {

        service-filter filter-name {

            term term-name {

                from {

                    match-conditions;

                }

                then {

                    action; 

                    action-modifiers; 

                }

            }

        }

    }

}

   
NOTE: You must specify inet as the address family in order to configure a 
service filter.


 

Service filters are configured the same way as firewall filters. Service filters have a subset of the match conditions and actions for firewall filters.

One of the actions must be service or skip:

• Specifying the service action directs packets for stateful-firewall service.
• Specifying the skip action let packets bypass stateful-firewall service.

For more information about configuring firewall filters, see Configuring Firewall Filters. For more information about services and service interfaces, see the JUNOS Services Interfaces Configuration Guide.