firewall {
    family inet {
        filter Protect-RE {
            term Permit-Loopback-All {
                from {
                    source-address {
                        10.255.255.100/32;
                    }
                }
                then accept;
            }
            term Permit-SSH {
                from {
                    source-address {
                        10.10.10.0/24;
                        10.10.16.0/24;
                        10.20.10.0/24;
                        10.20.11.0/30;
                        10.34.16.0/23;
                        10.37.16.0/23;
                    }
                    protocol tcp;
                    destination-port 22;
                }
                then accept;
            }
            term Permit-Telnet {
                from {
                    source-address {
                        10.20.10.3/32;
                    }
                    protocol tcp;
                    destination-port 23;
                }
                then {
                    count TELNET_COUNTER;
                    syslog;
                    accept;
                }
            }
            term Permit-HTTPS {
                from {
                    source-address {
                        10.20.10.0/24;
                        10.20.11.0/30;
                        10.34.16.0/23;
                        10.37.16.0/23;
                    }
                    protocol tcp;
                    destination-port 443;
                }
                then accept;
            }
            term Permit-RADIUS {
                from {
                    source-address {
                        10.20.11.0/30;
                    }
                    protocol udp;
                    source-port [ 1812 1813 ];
                }
                then accept;
            }
            term Permit-NTP {
                from {
                    source-address {
                        132.163.96.0/30;
                    }
                    protocol udp;
                    destination-port 123;
                }
                then accept;
            }
            term Permit-DNS {
                from {
                    source-address {
                        10.20.11.0/30;
                    }
                    protocol udp;
                    source-port 53;
                }
                then accept;
            }
            term Permit-ICMP-Request {
                from {
                    source-address {
                        10.10.10.0/24;
                        10.10.16.0/24;
                        10.20.10.0/24;
                        10.20.11.0/30;
                        10.34.16.0/23;
                        10.37.16.0/23;
                        10.255.253.0/24;
                        10.255.254.0/24;
                        10.255.255.0/24;
                    }
                    protocol icmp;
                    icmp-type echo-request;
                }
                then accept;
            }
            term Permit-ICMP-Reply {
                from {
                    protocol icmp;
                    icmp-type echo-reply;
                }
                then accept;
            }
            term Permit-Syslog {
                from {
                    source-address {
                        10.20.10.4/32;
                        10.20.10.9/32;
                    }
                    protocol udp;
                    destination-port 514;
                }
                then accept;
            }
            term Permit-DHCP {
                from {
                    source-address {
                        207.109.2.27/32;
                        172.16.0.0/23;
                        10.10.15.0/24;
                        10.10.20.0/24;
                        10.20.0.0/16;
                        10.34.0.0/16;
                        10.36.0.0/16;
                        10.37.0.0/16;
                        192.168.1.0/24;
                        192.168.2.0/24;
                    }
                    protocol udp;
                    destination-port [ 67 68 ];
                }
                then accept;
            }
            term Permit-BGP {
                from {
                    source-address {
                        10.255.253.0/24;
                        10.255.254.0/24;
                    }
                    protocol tcp;
                    destination-port 179;
                }
                then accept;
            }
            term Silent-Discard-LNCB {
                from {
                    destination-address {
                        224.0.0.0/24;
                    }
                }
                then {
                    discard;
                }
            }
            term Default-Discard {
                then {
                    count DEFAULT_DISCARD_COUNTER;
                    syslog;
                    discard;
                }
            }
        }
    }
}