term ALLOW-CBT-IN {
    from {
	source-address {
            10.40.40.199/32;
        }
	destination-address {
            192.168.75.200/32;
        }
    }
    then accept;
}
term ALLOW-CBT-OUT {
    from {
	source-address {
            192.168.75.200/32;
        }
	destination-address {
            10.40.40.199/32;
        }
    }
    then accept;
}
term BLOCK-ALL {
    from {
	source-address {
            192.168.0.0/16;
            10.0.0.0/8;
            172.16.0.0/12;
        }
	destination-address {
            192.168.75.200/32;
        }
    }
    then {
	reject;
    }
}




unit 75 {
    family inet {
        filter {
            input BLOCK-40-VLAN;
        }
        address 192.168.75.254/24;
    }
}