MX Inbound Layer3 FW Rules

[Sarv]

I see a default "deny all" inbound Layer3 rule on our MX. I'm going to assume that Deny All inbound layer3 rule has no effect if you create a NAT Forwarding rule. Is that correct? Just wanted to verify before I start creating Forwarding rules.

Thanks

Sarvjit

[ww]

The deny all should be only for ipv6.

Unless you running a early access:

NAT Exceptions with Manual Inbound Firewall

 

[Sarv]

Default Deny All rule is for Dual Stack and not just IPV6.  We haven't touched it so that must be the default.

[ww]

Hmm that would be new, i dont see it over here, only for the ipv6

 

Can you check if this early access is enabled?

NAT Exceptions with Manual Inbound Firewall

[Sarv]

Guess I will just play around with the rules and see how they impact each other.

Thanks

Sarvjit