[edit firewall family inet filter PROTECTION-ACL]
# show
term drop-udp-fragment {
from {
first-fragment;
protocol udp;
}
then {
discard;
}
}
term drop-udp-fragment-2 {
from {
is-fragment;
protocol udp;
}
then {
discard;
}
}
term rate-limit-tcp-syn {
from {
protocol tcp;
tcp-initial;
}
then {
policer TCP-SYN-Policer;
accept;
}
}
term rate-limit-dns {
from {
protocol udp;
port 53;
}
then {
policer DNS-Policer;
accept;
}
}