Automation

Scripting How-To: Add a "then accept" statement to firewall filters

By Elevate posted 08-10-2015 13:15

  

Junos firewall filters default to discarding anything that doesn't match the filter. To achieve the opposite behavior, the filter must include a bare "then accept" (with no match conditions). Such configuration is difficult to maintain. The add-accept filter checks to ensure that every filter has a bare accept statement. If one is missing, the script adds it and issues a warning to inform the user of the action.

 

Read the document: add-accept


#How-To
0 comments
0 views

Permalink