A configuration example in normal show mode: user@SRX-ROUTER> show configuration firewall family inet filter iiNet-Voice /* iiVoip - National Services Block */ term SERVICES { from { address { 203.173.44.0/24; } } then accept; } /* iiVoip - National SBC Networks */ term NETWORK { from { address { 203.55.228.192/26; 203.55.231.192/26; 203.55.229.192/26; 203.2.134.0/25; 203.59.49.0/26; } } then accept; } /* iiVoip - National Configuration / DMS Services */ term CONFIGURATION { from { address { 203.55.231.64/27; 203.206.62.0/27; } } then accept; } /* iiVoip – Supplemental services, DNS and NTP */ term SUPPLEMENTAL { from { address { /* iiVoip - iiNet DNS and NTP */ 203.0.178.191/32; /* iiVoip - iiNet DNS */ 203.215.29.191/32; } } then accept; } /* Reject all other traffic */ term ELSE { /* Logging of rejects is not recommended */ then { log; reject; } } An example in “set” mode: set firewall family inet filter iiNet-Voice term SERVICES from address 203.173.44.0/24 set firewall family inet filter iiNet-Voice term SERVICES then accept set firewall family inet filter iiNet-Voice term NETWORK from address 203.55.228.192/26 set firewall family inet filter iiNet-Voice term NETWORK from address 203.55.231.192/26 set firewall family inet filter iiNet-Voice term NETWORK from address 203.55.229.192/26 set firewall family inet filter iiNet-Voice term NETWORK from address 203.2.134.0/25 set firewall family inet filter iiNet-Voice term NETWORK from address 203.59.49.0/26 set firewall family inet filter iiNet-Voice term NETWORK then accept set firewall family inet filter iiNet-Voice term CONFIGURATION from address 203.55.231.64/27 set firewall family inet filter iiNet-Voice term CONFIGURATION from address 203.206.62.0/27 set firewall family inet filter iiNet-Voice term CONFIGURATION then accept set firewall family inet filter iiNet-Voice term SUPPLEMENTAL from address 203.0.178.191/32 set firewall family inet filter iiNet-Voice term SUPPLEMENTAL from address 203.215.29.191/32 set firewall family inet filter iiNet-Voice term SUPPLEMENTAL then accept set firewall family inet filter iiNet-Voice term ELSE then log set firewall family inet filter iiNet-Voice term ELSE then reject