[j-nsp] ACL for lo0 template/example comprehensive list of 'things to think about'?

[Chris Boyd]

> On Jul 11, 2018, at 1:17 PM, Drew Weaver <drew.weaver at thenap.com> wrote:
> 
> Is there a list of best practices or 'things to think about' when constructing a firewall filter for a loopback on an MX series router running version 15 of Junos?
> 
> I'm slowly piecing it together by just 'seeing what is broken next' and I have found some issue specific examples on Juniper.net thus far that tend to help with some of the issues but if anyone has ever seen a decent comprehensive guide that would be tremendously useful.
> 
> If anyone has seen anything like this let me know, if not no worries will just keep fixing the things one by one =)

Team Cymru has a “JunOS Secure Template” that I found a good place to start. It quotes version 4 though.  I think that means it’s well tested?

http://www.cymru.com/gillsr/documents/junos-template.pdf

—Chris