rulebase-ddos

Syntax

rulebase-ddos {rule rule-name {description text ;match {application [ any | default ];application-ddos ddos-application-name;destination-address [ address-name ];from-zone zone-name;source-address [ address-name ];to-zone zone-name;}then {action <close-server | drop-connection | drop-packet | no-action>;ip-action {<ip-block | ip-close | ip-notify>;timeout secconds;}}}}

Hierarchy Level

[edit security idp idp-policy policy-name]

Release Information

Statement introduced in Release 10.0 of Junos OS.

Description

Configure the rulebase parameters for application-level DDoS attacks.

Options

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.