Dear experts,
I am struggling to formulate a term to drop all packets with any
ip-option set apart from router-alert.
The following term does NOT work because drops not only packets with
ip-options other than router-alert, but also packet with NO
ip-option !!!! Which of course is devastating !!!!!
Any idea how to implement it?
Thanks,
bit.
inactive: term NO-RT-ALERT {
from {
ip-options-except router-alert;
}
then {
count NO-RT-ALERT;
log;
discard;
}
}
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
