[j-nsp] Firewall filter -EX4500

[Chris Kawchuk]

And you can omit the "source-address"  (i.e. it ignores the source IP now) and it matches all source IP traffic.

from {
 destination-prefix-list {
      F5Traffic-IP;
 }
then {
 accept;
}



On 09/07/2013, at 11:22 PM, Andy Litzinger <Andy.Litzinger at theplatform.com> wrote:

> I think your source ip range netmask should be /0, not /32.  I.e: 0.0.0.0/0
> 
> 
>> 
>> from {
>> 
>>   source-address {
>> 
>>       0.0.0.0/32;
>> 
>>   }
>> 
>>   destination-prefix-list {
>> 
>>       F5Traffic-IP;
>> 
>>   }
>> 
>> }
>> 
>> then accept;