[j-nsp] Firewall filters getting reordered?

Pekka Savola pekkas at netcore.fi
Mon Oct 24 01:07:16 EDT 2005


On Mon, 24 Oct 2005, Brian W. Gemberling wrote:
> 	We had a router that rebooted tonight.  When the box came back up some
> of the firewall filters had terms that were out of order (in turn filtering out
> OSPF in this case).  Has anyone seen this before?  Running 7.0R2.7.  Also
> it looks like policies were out of order as well.

Have you checked out whether you're hitting:

PSN-2003-05-006  	Firewall terms might not be evaluated 
sequentially

That's tracked by PR28108 and has not been fixed.

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


More information about the juniper-nsp mailing list