[j-nsp] Firewall filter and olive

[Bit Gossip]

Hi Sergio,
it really doesn't seem to work in my setup, filtering locally
originated/terminated traffic. Would you share how you got it
working.....
Thanks,
bit.

bit at rr1> show configuration interfaces fxp0.0
family inet {
    no-redirects;
    filter {
        input DENYALL;
        output DENYALL;
    }
    address 192.168.255.1/24;
}

bit at rr1> show configuration interfaces lo0.0
family inet {
    filter {
        input DENYALL;
        output DENYALL;
    }
    address 162.79.28.60/32;
}
family iso {
    address 49.0001.1111.1111.1111.00;
}

bit at rr1> show configuration firewall
filter DENYALL {
    term DENYALL {
        then {
            reject;
        }
    }
}

bit at rr1> show version
Hostname: rr1
Model: olive
JUNOS Base OS boot [9.5R1.8]
JUNOS Base OS Software Suite [9.5R1.8]


On Sat, 2009-06-27 at 11:30 -0600, Sergio D. wrote:
> firewall filters work just fine on an olive.
> http://juniper.cluepon.net/index.php/Olive#Tested_and_working
> 
> I've done a few myself.
>