Daniel Roesen writes: > BTW... using DCU requires firewall filters on all interfaces, right? > As far as I see, it MIGHT be possible to put a generalized, non- > interface-specific filter to the PFE with this one (per RIB): I use: [forwarding-options family inet filter input] The config stanza you pointed out does not seem to exit...