EX NETBOOT FILTER

term ALLOW-NETBOOT-CLIENT {
    from {
        destination-address {
            255.255.255.255/32;
        }
        protocol udp;
        destination-port bootps;
    }
    then {
        count ALLOW-NETBOOT-CLIENT;
        accept;
    }
}
term ALLOW-NETBOOT-SERVER {
    from {
        source-prefix-list {
            NETBOOT-SERVERS;
        }
        protocol udp;
        destination-port bootps;
    }
    then {
        count ALLOW-NETBOOT-SERVER;
        accept;
    }
}