Match packets that are either OSPF packets or packets that come from an address in the prefix 10.108/16, and send an administratively-prohibited ICMP message for all packets that do not match:
- [edit]
- firewall {
-
- family inet {
-
- filter ospf-or-131 {
-
- term protocol-match {
-
- from {
- protocol ospf;
- }
- }
-
- term address-match {
-
- from {
-
- source-address {
- 10.108.0.0/16;
- }
- }
- }
- }
- }
- }