Re: Malicious IP Filter

Hi,

There is no list available on the SRX.

Here is the configuration to block the IPs using firewall filters :-

set firewall filter test2 term 1 from source-address 31.13.81.5/32

set firewall filter test2 term 1 from source-address 31.13.81.34/32

set firewall filter test2 term 1 from protocol tcp

set firewall filter test2 term 1 then reject

set firewall filter test2 term 2 then accept

Then apply this filter as input on your interface :-

set interfaces <name> family inet filter input test2

More details in the following link :-

https://kb.juniper.net/InfoCenter/index?page=content&id=KB21872

Regards,

Sahil Sharma

---------------------------------------------------

Please mark my solution as accepted if it helped, Kudos are appreciated as well.