family inet {
    filter protect-host {
        term limit-icmp {
            from {
                source-address {
                    10.210.0.0/16;
                }
                protocol icmp;
            }
            then accept;
        }
        term limit-ftp {
            from {
                source-address {
                    10.210.0.0/16;
                }
                protocol tcp;
                destination-port 21;
            }
            then accept;
        }
        term limit-ssh {
            from {
                source-address {
                    10.210.0.0/16;
                }
                protocol tcp;
                destination-port 22;
            }
            then accept;
        }
        term limit-telnet {
            from {
                source-address {
                    10.210.0.0/16;
                }
                protocol tcp;
                destination-port 23;
            }
        }
        term ftp-allow {
            from {
                source-address {
                    172.20.106.0/24;
                }
                protocol tcp;
                source-port 21;
            }
            then accept;
        }
    }
}