Re: [j-nsp] How many bits/bytes of a packet can be matched in a firewall rule on Juniper MX-series?

2021-07-09 Thread Saku Ytti via juniper-nsp
On Fri, 9 Jul 2021 at 13:24, embolist wrote: > So, I can match a bit pattern within the first 256 bytes from the start of > the IP header, is that correct? > How many bits can I match within that first 256 bytes? You can set the match-start from L3, L4 or payload and take 256 bytes offset

Re: [j-nsp] How many bits/bytes of a packet can be matched in a firewall rule on Juniper MX-series?

2021-07-09 Thread embolist via juniper-nsp
--- Begin Message --- Sent from ProtonMail for iOS On Fri, Jul 9, 2021 at 12:30, Saku Ytti wrote: > But seeing you included a question about filter chaining, I'm not sure > I understood your question right. I'm the one who's not understanding right, haha! So, I can match a bit pattern within