Licson Lee says to 電訊台
[edit firewall family inet filter PROTECTION-ACL] # show term drop-udp-fragment { from { first-fragment; protocol udp; } then { discard; } } term drop-udp-fragment-2 { from { is-fragment; protocol udp; } then { discard; } } term rate-limit-tcp-syn { from { protocol tcp; tcp-initial; } then { policer TCP-SYN-Policer; accept; } } term rate-limit-dns { from { protocol udp; port 53; } then { policer DNS-Policer; accept; } }