Do Firewall Filters on Olive Work ?

Jmiller1980

Guys,

I built the filters below to block ssh traffic and everytime I apply to my em0.0 all traffic stops through the interface. What am I doing wrong to cause this ?

firewall {
filter local-access {
term terminal-access {
from {
address {
192.20.20.28/32;
}
protocol tcp;
port ssh;
}
then accept;
}
term no-access {
from {
protocol tcp;
port ssh;
}
then {
log;
reject;
}
}
}
filter Kill-SSH {
term Kill-SSH-192.20.20.28 {
from {
source-address {
192.20.20.28/32;
}
protocol tcp;
port ssh;
}
then accept;
}
}
}



interfaces {
em0 {
unit 0 {
family inet {
filter {
input Kill-SSH;
}
address 192.20.20.250/24;

Model: olive
JUNOS Base OS boot [10.1R1.8]
JUNOS Base OS Software Suite [10.1R1.8]
JUNOS Kernel Software Suite [10.1R1.8]
JUNOS Crypto Software Suite [10.1R1.8]
JUNOS Packet Forwarding Engine Support (M/T Common) [10.1R1.8]
JUNOS Packet Forwarding Engine Support (M20/M40) [10.1R1.8]
JUNOS Online Documentation [10.1R1.8]
JUNOS Voice Services Container package [10.1R1.8]
JUNOS Border Gateway Function package [10.1R1.8]
JUNOS Services AACL Container package [10.1R1.8]
JUNOS Services LL-PDF Container package [10.1R1.8]
JUNOS Services Stateful Firewall [10.1R1.8]
JUNOS AppId Services [10.1R1.8]
JUNOS IDP Services [10.1R1.8]
JUNOS Routing Software Suite [10.1R1.8]

networker050184

I'm not too familiar with olives, but what are you trying to accomplish with this filter? Keep in mind there is an implicit deny at the end of your filter that will block everything else.