[j-nsp] SRX240 Multicast

[kwoody at citywest.ca]

> So you have also allowed inbound traffic with
>
> set security zones security-zone <zone_name> host-inbound-traffic
> protocols
> all
>
> ?  This is different than security policies (and perhaps I wasn't clear on
> that).

This is what I have:

I thought this was enough, maybe not.

show security
policies {
    default-policy {
        permit-all;
    }
}
zones {
    security-zone policies;
    security-zone trust {
        host-inbound-traffic {
            system-services {
                all;
            }
            protocols {
                all;
            }
        }
        interfaces {
            all;
        }
    }
}