Ingress filtering on transits, peers, and IX ports

Thu Oct 15 16:29:21 UTC 2020

> Chris Adams
> Sent: Thursday, October 15, 2020 3:59 PM
> 
> Once upon a time, adamv0025 at netconsultings.com
> <adamv0025 at netconsultings.com> said:
> > Actually ideally there would be a feature/knob to automatically sync BGP
> (and static routes) with packet filters.
> 
> Junos has prefix-lists that can be referenced in both BGP policy and
firewall
> statements.
>
What I mean was a firewall filter that would get updated with accordance to
prefixes received/advertised via BGP, even better if this was a default
behaviour.


adam