Re: [j-nsp] Output filter on discard interface doesn't work as expected

2017-03-10 Thread Alex D.
Am 10.03.2017 16:27, schrieb Karsten Thomann: Hi, Already tried to set the firewall filter as input on dsc.0? Yes, i already tried that. Also no success. According to the Juniper documentation, it definitely must be applied as an output filter. Regards, Alex _

Re: [j-nsp] Set system no-ping-time-stamp

2017-03-10 Thread Phil Shafer
"Valentini, Lucio" writes: >The question >is, what do the other commands do ? Juniper does not seem to provide examples. >I never >see the time stamp in the ping response anyway. These config knobs set sysctl variables in the FreeBSD kernel to instruct it on how to behave. The values are then p

[j-nsp] Output filter on discard interface doesn't work as expected

2017-03-10 Thread Alex D.
Hi, i have a problem with my firewall filter bound to a discard interface dsc.0 in a quite simple RTBH setup... I receive a bgp route with a next-hop ip 192.0.2.101 which is configured on a discard interface. Blackholing works as expected, means that traffic coming in from a directly connected