雜七雜八的小筆記!

root> configure
Entering configuration mode
The configuration has been changed but not committed

The interface ge-0/0/0 is uplink only.

由下列訊息可以看到紅色部份就是被Firewall擋下來的session.

root@SRX-3400> show security flow cp-session source-prefix 192.168.192.192

# set security policies from-zone untrust to-zone junos-host policy deny-man-traffic match source-address 220.228.123.123/32 destination-address any application any
# set security policies from-zone untrust to-zone junos-host policy deny-man-traffic then deny