[j-nsp] mitigating dos attack on Juniper M10i

[Chris Kawchuk]

Is firewall filter "SAMPLER" or "BLOCK-FROM-INTERNET" doing any type of "then accept" on the remainder traffic?

If so, an accept is a terminating action, and no other filters (even filter-chains) are evaluated; hence filter "all" is never called.

- Chris.

 
On 2011-04-06, at 7:32 AM, kwarteng wrote:

> SAMPLER BLOCK-FROM-INTERNET