[j-nsp] Port list?

[Eli Dart]

Does anyone know of a way to define a list of ports in Juniper policy?

For a border router, it would be nice to do something like the 
following:

firewall {
 filter inbound {
  term block-bad-tcp-ports {
   from {
    protocol tcp;
    destination-port-list BAD-TCP;
   }
   then discard;
  }
 }
}

This allows the maintenance of a list of ports without touching the 
firewall filter.  It also avoids the problem of keeping multiple 
instances of a port list in sync.

Juniper folks, are there any plans to implement such a thing?

		--eli



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 224 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/juniper-nsp/attachments/20041006/4ae3780e/attachment.bin