version 7.1R2.2;
groups {
    re0 {
        system {
            host-name fhr1.lo6-re0;
        }
        interfaces {
            fxp0 {
                disable;
                unit 0 {
                    family inet;
                }
            }
        }
    }
    re1 {
        system {
            host-name fhr1.lo6-re1;
        }
        interfaces {
            fxp0 {
                disable;
                unit 0 {
                    family inet;
                }
            }
        }
    }
}
apply-groups [ re0 re1 ];
system {
    domain-name savvis.net;
    time-zone America/New_York;
    default-address-selection;
    dump-on-panic;
    authentication-order radius;
    name-server {
        204.71.36.9;
        204.70.127.127;
    }
    radius-server {
        167.215.232.32 {
            secret "$9$F4r/36CAp0hSe69IcylW8";
            timeout 5;
            retry 1;
        }
        216.90.89.135 {
            secret "$9$f5Q3n/CBIcQFu1Rhle";
            timeout 5;
            retry 1;
        }
    }
    login {
        class all {
            idle-timeout 15;
            permissions all;
        }
        class read-access {
            idle-timeout 15;
            permissions [ interface network routing snmp system trace view firewall ];
            deny-commands "set|request|test|file|clear";
        }
        class scc {
            idle-timeout 15;
            permissions [ clear configure interface interface-control network reset routing routing-control snmp system trace view firewall rollback view-configuration ];
            allow-configuration interfaces;
        }
        class scc_access {
            idle-timeout 15;
            permissions [ configure interface network routing snmp system trace view ];
        }
        user FULL {
            uid 3004;
            class all;
        }
        user READ {
            uid 2000;
            class read-access;
        }
        user SCC {
            uid 4000;
            class scc;
        }
        user autojuco {
            uid 2017;
            class all;
            authentication {
                ssh-rsa "1024 35 117368654974780910785804472328190496433755973300803053423299024175036242435747627812505529688000436949785484981772284116245736038093657503993364805140242824490573695257301456102356172165176328625890867569328219292100315044847195987067474021662846314660195892724192964475644563644853660336695620996491872426299 autojuco- 8/25/2004";
                ssh-rsa "1024 35 117368654974780910785804472328190496433755973300803053423299024175036242435747627812505529688000436949785484981772284116245736038093657503993364805140242824490573695257301456102356172165176328625890867569328219292100315044847195987067474021662846314660195892724192964475644563644853660336695620996491872426299 autojuco - 8/25/2004";
            }
        }
    }
    static-host-mapping {
        fhr1.lo6 sysid 02aa.ce18.ac40;
        fhr2.lo6 sysid 02aa.ce18.ac60;
    }
    services {
        ssh {
            connection-limit 16;
            rate-limit 10;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        host 204.71.36.44 {
            any notice;
            authorization info;
            daemon info;
            kernel info;
            interactive-commands any;
        }
        host 204.71.36.45 {
            any notice;
            authorization info;
            daemon info;
            kernel info;
            interactive-commands any;
        }
        host 204.70.133.240 {
            any notice;
            authorization info;
            daemon info;
            kernel info;
            interactive-commands any;
        }
        host 212.124.244.48 {
            any notice;
            authorization any;
            cron any;
            daemon any;
            kernel any;
            user any;
            firewall any;
        }
        host 216.90.89.68 {
            any notice;
            authorization info;
            daemon info;
            kernel info;
            interactive-commands any;
        }
        file messages {
            any notice;
            authorization info;
            daemon info;
            kernel info;
        }
        file ACL10-firewall {
            firewall any;
        }
        file cli_logs {
            interactive-commands any;
        }
    }
    processes {
        snmp enable;
    }
    ntp {
        server 204.70.128.1;
        server 204.70.57.242;
    }
}
chassis {
    no-source-route;
    dump-on-panic;
    redundancy {
        routing-engine 0 backup;
        routing-engine 1 master;
    }
    aggregated-devices {
        sonet {
            device-count 1;
        }
    }
}
interfaces {
    ge-0/0/0 {
        description "G/E DataCenter trunk to uklond6-001.exalp-e:3.3";
        vlan-tagging;
        link-mode full-duplex;
        gigether-options {
            flow-control;
        }
        unit 3 {
            description "Mgt LAN - uklond6-001.exalp-a:8.7";
            vlan-id 3;
            family inet {
                accounting {
                    destination-class-usage;
                }
                address 10.49.235.4/26;
            }
        }
        unit 8 {
            description "Public LAN to uklond6_001.exalp-e:8.1";
            vlan-id 8;
            family inet {
                accounting {
                    destination-class-usage;
                }
                address 213.174.192.177/29;
            }
        }
        unit 27 {
            description "Internet Transit VLAN to Inkra";
            vlan-id 27;
            family inet {
                accounting {
                    destination-class-usage;
                }
                filter {
                    output deny-non-routable;
                }
                address 213.174.206.3/23 {
                    vrrp-group 254 {
                        virtual-address 213.174.206.1;
                        priority 254;
                    }
                    vrrp-group 255 {
                        virtual-address 213.174.206.2;
                        priority 100;
                    }
                }
            }
        }
        unit 901 {
            description "VPN Public Interface";
            vlan-id 901;
            family inet {
                accounting {
                    destination-class-usage;
                }
                filter {
                    output ACL109;
                }
                address 213.174.194.2/26 {
                    vrrp-group 109 {
                        virtual-address 213.174.194.1;
                        priority 101;
                    }
                }
            }
        }
        unit 912 {
            description "The Carlyle Group s254723 bgp1";
            vlan-id 912;
            family inet {
                accounting {
                    destination-class-usage;
                }
                address 165.193.172.73/30;
            }
        }
        unit 961 {
            description "Zynap Pro Co-Lo";
            vlan-id 961;
            family inet {
                accounting {
                    destination-class-usage;
                }
                filter {
                    input IDS-ZYNAPCOLO-TO-NET-ANTI-SPOOF;
                    output NET-TO-IDS-ZYNAPCOLO-ANTI-SPOOF;
                }
                address 213.174.199.210/29 {
                    vrrp-group 161 {
                        virtual-address 213.174.199.209;
                        priority 251;
                    }
                }
            }
        }
        unit 969 {
            description "B&Q Co-Lo";
            vlan-id 969;
            family inet {
                accounting {
                    destination-class-usage;
                }
                filter {
                    input IDS-BANDQCOLO-TO-NET-ANTI-SPOOF;
                }
                address 10.83.54.162/29 {
                    vrrp-group 169 {
                        virtual-address 10.83.54.161;
                        priority 251;
                    }
                }
            }
        }
        unit 972 {
            description "iNext Co-Lo";
            vlan-id 972;
            family inet {
                accounting {
                    destination-class-usage;
                }
                filter {
                    input IDS-INEXTCOLO-TO-NET-ANTI-SPOOF;
                    output NET-TO-IDS-INEXTCOLO-ANTI-SPOOF;
                }
                address 213.174.199.114/29 {
                    vrrp-group 72 {
                        virtual-address 213.174.199.113;
                        priority 101;
                    }
                }
            }
        }
        unit 978 {
            description "Inchcape Co-Lo First POD";
            vlan-id 978;
            family inet {
                accounting {
                    destination-class-usage;
                }
                filter {
                    input IDS-INCHCAPECOLO-TO-NET-ANTI-SPOOF;
                    output NET-TO-IDS-INCHCAPECOLO-ANTI-SPOOF;
                }
                address 213.174.203.2/26 {
                    vrrp-group 72 {
                        virtual-address 213.174.203.1;
                        priority 101;
                    }
                }
            }
        }
    }
    at-0/1/0 {
        description "Future OC12 ATM for customer access via 550 - test rancid";
        disable;
        clocking internal;
        encapsulation atm-pvc;
        sonet-options {
            payload-scrambler;
        }
        atm-options {
            vpi 1 {
                maximum-vcs 512;
            }
            vpi 2 {
                maximum-vcs 512;
            }
        }
    }
    so-0/3/0 {
        description "OC12 to SCR2.Lond6:so-0/3/0 part1 of as0";
        sonet-options {
            rfc-2615;
            aggregate as0;
        }
    }
    at-1/1/0 {
        description "OC12 atm to 550  uklond6.ag:3.9";
        mtu 4482;
        clocking internal;
        encapsulation atm-pvc;
        sonet-options {
            payload-scrambler;
        }
        atm-options {
            vpi 1 {
                maximum-vcs 256;
            }
            vpi 2 {
                maximum-vcs 256;
            }
            vpi 8 {
                maximum-vcs 1024;
            }
        }
        unit 105 {
            description "Test Hybrid - VLAN822";
            encapsulation atm-snap;
            vci 1.105;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.65/30;
            }
        }
        unit 106 {
            description "Fish4 Production - VLAN823";
            encapsulation atm-snap;
            vci 1.106;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.81/30;
            }
        }
        unit 107 {
            description "Axon Production - VLAN872";
            encapsulation atm-snap;
            vci 1.107;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.33/30;
            }
        }
        unit 108 {
            description "Medtronic - VLAN893";
            encapsulation atm-snap;
            vci 1.108;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.93/30;
            }
        }
        unit 109 {
            description "Screwfix Production - VLAN879";
            encapsulation atm-snap;
            vci 1.109;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.161/30;
            }
        }
        unit 110 {
            description "Screwfix DR - VLAN332";
            encapsulation atm-snap;
            vci 1.110;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.169/30;
            }
        }
        unit 111 {
            description "Easybroker Production - VLAN869";
            encapsulation atm-snap;
            vci 1.111;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.177/30;
            }
        }
        unit 112 {
            description "Easybroker Test - VLAN868";
            encapsulation atm-snap;
            vci 1.112;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.201/30;
            }
        }
        unit 113 {
            description "LME_WEB - VLAN864";
            encapsulation atm-snap;
            vci 1.113;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.89/30;
            }
        }
        unit 114 {
            description "LME_CORP - VLAN866";
            encapsulation atm-snap;
            vci 1.114;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.213/30;
            }
        }
        unit 115 {
            description "LMUK Production - VLAN877";
            encapsulation atm-snap;
            vci 1.115;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.217/30;
            }
        }
        unit 116 {
            description "LMUK Development - VLAN333";
            encapsulation atm-snap;
            vci 1.116;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.233/30;
            }
        }
        unit 117 {
            description "Reception Room - VLAN990";
            encapsulation atm-snap;
            vci 1.117;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.189/30;
            }
        }
        unit 118 {
            description "Gaming Boarse Production - VLAN853";
            encapsulation atm-snap;
            vci 1.118;
            oam-period 3;
            oam-liveness {
                up-count 3;
                down-count 3;
            }
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 1500;
                address 213.174.193.129/30;
            }
        }
        unit 710 {
            description "DRAIN for uklond6_01.bsn-a:cntx04";
            encapsulation atm-snap;
            point-to-point;
            vci 8.710;
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 4470;
                filter {
                    input uklond6_01_cntx04_ingress;
                    output uklond6_01_cntx04_egress;
                }
                address 206.24.172.81/30;
            }
        }
        unit 711 {
            description "DRAIN for uklond6_01.bsn-a:cntx11";
            encapsulation atm-snap;
            point-to-point;
            vci 8.711;
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 4470;
                address 206.24.172.129/30;
            }
        }
        unit 713 {
            description "DRAIN for uklond6_01.bsn-a:cntx13";
            encapsulation atm-snap;
            point-to-point;
            vci 8.713;
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 4470;
                address 206.24.172.133/30;
            }
        }
        unit 714 {
            description "DRAIN for uklond6_01.bsn-a:cntx14";
            encapsulation atm-snap;
            point-to-point;
            vci 8.714;
            family inet {
                accounting {
                    destination-class-usage;
                }
                mtu 4470;
                address 206.24.172.137/30;
            }
        }
        unit 920 {
            description "fhr1.lo6 to kar1.nyr at-0/3/0.920";
            encapsulation atm-snap;
            point-to-point;
            vci 8.920;
            family inet {
                address 204.70.145.2/30;
            }
        }
        unit 930 {
            description "fhr1.lo6 to kar2.nyr at-0/3/0.930";
            encapsulation atm-snap;
            point-to-point;
            vci 8.930;
            family inet {
                address 204.70.148.6/30;
            }
        }
        unit 940 {
            description "To dcr1.frx at-2/0/0.940";
            encapsulation atm-snap;
            point-to-point;
            vci 8.940;
            family inet {
                address 204.70.192.229/30;
            }
        }
        unit 950 {
            description "fhr1.lo6 to acr2.frx at-2/0/0.950";
            encapsulation atm-snap;
            point-to-point;
            vci 8.950;
            family inet {
                address 204.70.192.233/30;
            }
            family iso;
            family mpls;
        }
        unit 960 {
            description "fhr1.lo6 to bcr1.lnx at-3/1/0:960";
            encapsulation atm-snap;
            point-to-point;
            vci 8.960;
            family inet {
                address 206.24.172.69/30;
            }
            family iso;
            family mpls;
        }
        unit 970 {
            description "fhr1.lo6 to bcr2.lnx at-3/1/0:970";
            encapsulation atm-snap;
            point-to-point;
            vci 8.970;
            family inet {
                address 206.24.172.73/30;
            }
            family iso;
            family mpls;
        }
    }
    so-1/3/0 {
        description "OC12 to SCR2.Lond6:so-1/3/0 part2 of as0";
        sonet-options {
            rfc-2615;
            aggregate as0;
        }
    }
    as0 {
        description "Bonded OC12 to SCR2.Lond6:as0";
        aggregated-sonet-options {
            link-speed oc12;
        }
        unit 0 {
            family inet {
                address 206.24.172.77/30;
            }
            family iso;
            family mpls;
        }
    }
    dsc {
        unit 0 {
            family inet {
                address 206.24.194.50/32 {
                    destination 206.24.194.51;
                }
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                primary;
                filter {
                    input ACL10;
                }
                address 206.24.172.64/32 {
                    primary;
                    preferred;
                }
                address 208.174.15.156/32;
            }
            family iso {
                address 47.0005.80ff.e200.000a.0000.3200.02aa.ce18.ac40.00;
            }
        }
    }
}
snmp {
    description for-snmp;
    community marzbar {
        authorization read-only;
        clients {
            209.83.194.0/24;
        }
    }
    community mvJuwJIkTJcPel2z {
        authorization read-only;
    }
}
accounting-options {
    file ddos2 {
        files 10;
    }
    file ddos3 {
        files 10;
    }
    class-usage-profile ddos2 {
        file ddos2;
        interval 1;
        destination-classes {
            dos-victim2;
        }
    }
    class-usage-profile ddos3 {
        file ddos3;
        interval 1;
        destination-classes {
            dos-victim3;
        }
    }
}
routing-options {
    interface-routes {
        rib-group inet ifrg;
    }
    static {
        route 213.174.195.80/28 {
            qualified-next-hop at-1/1/0.108 {
                preference 230;
            }
        }
        route 213.174.196.128/28 {
            qualified-next-hop at-1/1/0.110 {
                preference 230;
            }
        }
        route 213.174.196.192/28 {
            qualified-next-hop at-1/1/0.105 {
                preference 230;
            }
        }
        route 213.174.197.208/28 {
            qualified-next-hop at-1/1/0.112 {
                preference 230;
            }
        }
        route 213.174.200.96/28 {
            qualified-next-hop at-1/1/0.117 {
                preference 230;
            }
        }
        route 213.174.201.0/28 {
            qualified-next-hop at-1/1/0.113 {
                preference 230;
            }
        }
        route 213.174.201.32/32 {
            qualified-next-hop at-1/1/0.114 {
                preference 230;
            }
        }
        route 213.174.201.64/32 {
            qualified-next-hop at-1/1/0.107 {
                preference 230;
            }
        }
        route 213.174.192.0/25 next-hop 213.174.206.233;
        route 213.174.192.208/29 next-hop 213.174.206.9;
        route 213.174.192.216/29 next-hop 213.174.206.9;
        route 213.174.193.0/28 next-hop 213.174.207.105;
        route 213.174.195.0/26 next-hop 213.174.206.25;
        route 213.174.195.112/28 next-hop 213.174.206.249;
        route 213.174.195.128/28 next-hop 213.174.206.113;
        route 213.174.195.176/28 next-hop 213.174.206.97;
        route 213.174.195.224/28 next-hop 213.174.206.81;
        route 213.174.196.0/28 next-hop 213.174.206.169;
        route 213.174.196.16/28 next-hop 213.174.206.105;
        route 213.174.196.32/28 next-hop 213.174.206.241;
        route 213.174.196.64/28 next-hop 213.174.206.121;
        route 213.174.196.160/28 next-hop 213.174.206.241;
        route 213.174.196.176/28 next-hop 213.174.207.49;
        route 213.174.196.224/29 next-hop 213.174.206.137;
        route 213.174.196.240/28 next-hop 213.174.207.113;
        route 213.174.198.0/27 next-hop 213.174.207.57;
        route 213.174.198.32/27 next-hop 213.174.207.73;
        route 213.174.198.64/27 next-hop 213.174.207.89;
        route 213.174.198.192/29 next-hop 213.174.206.185;
        route 213.174.198.208/28 next-hop 213.174.206.65;
        route 213.174.198.240/29 next-hop 213.174.207.1;
        route 213.174.199.0/27 next-hop 213.174.206.211;
        route 213.174.199.64/27 next-hop 213.174.207.17;
        route 213.174.199.96/28 next-hop 213.174.206.201;
        route 213.174.199.128/29 next-hop 213.174.206.33;
        route 213.174.199.144/29 next-hop 213.174.206.177;
        route 213.174.199.160/27 next-hop 213.174.206.161;
        route 213.174.200.0/28 next-hop 213.174.206.145;
        route 213.174.200.80/28 next-hop 213.174.206.17;
        route 213.174.200.128/29 next-hop 213.174.206.217;
        route 213.174.200.144/28 next-hop 213.174.207.33;
        route 213.174.200.192/27 next-hop 213.174.207.9;
        route 213.174.201.96/28 next-hop 213.174.207.129;
        route 213.174.201.128/25 next-hop 213.174.206.233;
        route 213.174.202.160/27 next-hop 213.174.206.241;
        route 213.174.205.0/24 next-hop 213.174.207.41;
        route 213.174.207.116/32 next-hop 213.174.207.113;
        route 213.174.198.128/27 next-hop 213.174.199.118;
        route 213.174.199.224/27 next-hop 213.174.199.118;
        route 213.174.195.64/29 next-hop 10.83.54.166;
        route 213.174.202.128/27 next-hop 10.83.54.166;
        route 213.174.197.176/28 next-hop at-1/1/0.111;
        route 213.174.200.32/28 next-hop at-1/1/0.109;
        route 213.174.202.0/25 next-hop at-1/1/0.106;
        route 213.174.196.96/28 next-hop 213.174.207.137;
        route 213.174.195.72/29 next-hop 213.174.206.73;
        route 213.174.192.144/28 next-hop 213.174.207.81;
        route 213.174.200.224/28 next-hop 213.174.207.153;
        route 213.174.203.192/28 next-hop 213.174.207.178;
        route 213.174.202.192/27 {
            qualified-next-hop at-1/1/0.115 {
                preference 230;
            }
        }
        route 213.174.202.224/28 {
            qualified-next-hop at-1/1/0.115 {
                preference 230;
            }
        }
        route 213.174.197.128/27 {
            qualified-next-hop at-1/1/0.115 {
                preference 230;
            }
        }
        route 213.174.198.160/28 next-hop 213.174.207.161;
        route 213.174.203.224/27 next-hop 213.174.207.185;
        route 213.174.198.184/29 next-hop 213.174.207.169;
        route 213.174.203.160/28 next-hop 213.174.207.201;
        route 213.174.203.144/29 next-hop 213.174.207.209;
        route 213.174.196.232/29 next-hop 213.174.207.193;
        route 213.174.197.224/28 next-hop 213.174.207.217;
        route 213.174.192.128/29 next-hop 213.174.207.225;
        route 213.174.203.208/29 next-hop 213.174.207.233;
        route 213.174.197.240/28 next-hop 213.174.207.249;
        route 213.174.203.216/29 next-hop 213.174.207.241;
        route 213.174.196.112/28 next-hop 213.174.206.13;
        route 213.174.198.176/29 next-hop 213.174.206.21;
        route 213.174.198.251/32 next-hop 213.174.206.53;
        route 213.174.197.0/25 next-hop 213.174.206.69;
        route 212.117.224.192/26 next-hop 213.174.206.61;
        route 213.174.198.250/32 next-hop 213.174.206.37;
        route 213.174.198.252/32 next-hop 213.174.206.77;
        route 213.174.198.253/32 next-hop 213.174.206.109;
        route 212.124.227.48/28 next-hop 213.174.206.93;
        route 82.118.66.0/24 next-hop 213.174.206.125;
        route 82.118.67.0/24 next-hop 213.174.206.133;
        route 82.118.65.112/28 next-hop 213.174.206.141;
        route 213.174.199.48/29 next-hop 213.174.207.65;
        route 82.118.65.192/26 next-hop 213.174.206.173;
        route 82.118.71.0/27 next-hop 213.174.206.117;
        route 82.118.95.96/27 next-hop 213.174.206.149;
        route 213.174.201.112/28 next-hop 213.174.207.145;
        route 212.124.251.176/28 next-hop 213.174.206.165;
        route 213.174.200.16/28 next-hop 213.174.206.45;
        route 212.124.226.88/29 next-hop 213.174.206.157;
        route 82.118.71.64/26 next-hop 213.174.206.157;
        route 213.174.198.192/28 next-hop 213.174.206.185;
        route 206.24.172.144/28 next-hop 213.174.206.9;
        route 82.118.70.0/24 next-hop 213.174.206.181;
        route 212.124.251.160/28 next-hop at-1/1/0.108;
        route 82.118.65.96/29 next-hop 213.174.206.181;
        route 212.124.252.112/28 next-hop 213.174.206.101;
        route 206.24.172.192/26 next-hop 213.174.207.9;
        route 212.124.253.32/28 next-hop 213.174.206.189;
        route 212.124.227.160/27 next-hop 213.174.206.197;
        route 212.124.239.192/27 next-hop 213.174.207.217;
        route 212.117.224.112/28 next-hop 213.174.206.205;
        route 212.124.240.0/28 next-hop 213.174.206.213;
        route 216.219.74.0/23 next-hop 213.174.206.221;
        route 0.0.0.0/0 {
            discard;
            no-install;
        }
        route 212.124.240.176/28 next-hop 213.174.206.229;
        route 212.124.236.32/29 next-hop 213.174.206.237;
        route 212.124.224.64/28 next-hop 213.174.206.197;
        route 212.124.241.208/28 next-hop 213.174.206.245;
        route 213.174.193.128/27 next-hop at-1/1/0.109;
        route 212.124.241.240/28 next-hop 213.174.207.5;
        route 213.174.192.0/19 reject;
    }
    rib-groups {
        mcrg {
            export-rib inet.2;
            import-rib inet.2;
        }
        ifrg {
            import-rib [ inet.0 inet.2 ];
        }
        mcast-rpf-rib {
            import-rib inet.2;
        }
        ios-isis-routes {
            import-rib [ inet.0 inet.2 ];
            import-policy isis-tag;
        }
        static-rg {
            import-rib [ inet.0 inet.2 ];
            import-policy deny-default;
        }
    }
    router-id 206.24.172.64;
    autonomous-system 3561;
    forwarding-table {
        export [ per-flow-load-balancing ddostracking2 ddostracking3 ];
    }
}
protocols {
    rsvp {
        traceoptions {
            file rsvp-log size 1m files 10;
            flag error;
            flag state;
        }
        interface all;
    }
    mpls {
        statistics {
            file mpls-stat;
            interval 160;
        }
        log-updown {
            syslog;
            trap;
        }
        traceoptions {
            file mpls-log size 1m files 10;
            flag state;
            flag error;
        }
        interface all;
    }
    bgp {
        traceoptions {
            file bgp size 1m files 5;
            flag state send receive detail;
            flag open send receive detail;
        }
        hold-time 180;
        log-updown;
        damping;
        group internal {
            type internal;
            family inet {
                unicast;
                multicast;
            }
            authentication-key "$9$nOLcCpOEcyv8xSysgoaUD3n/90B";
            export [ next-hop-self announce-local ];
            peer-as 3561;
            neighbor 206.24.168.27 {
                description bcr1.lnx;
            }
            neighbor 206.24.168.28 {
                description bcr2.lnx;
            }
            neighbor 206.24.168.1 {
                description dar1.lnx;
            }
            neighbor 206.24.168.2 {
                description iar1.lnx;
            }
            neighbor 206.24.172.96 {
                description fhr2.lo6;
                export [ next-hop-self announce-local redistribute-direct ];
            }
            neighbor 204.70.145.1 {
                description kar1.nyr:at-0/3/0.920;
                local-address 204.70.145.2;
            }
            neighbor 204.70.148.5 {
                description kar2.nyr:at-0/3/0.930;
                local-address 204.70.148.6;
            }
        }
        group AS65530 {
            type external;
            description "The Carlyle Group";
            multihop {
                ttl 1;
            }
            import [ AS65530-DDoS cisco-damping filter-multihomed-customer color-external-neighbor set-customer-private-ASN-local-pref AS65530 ];
            export [ default-originate deny-all ];
            remove-private;
            peer-as 65530;
            neighbor 165.193.172.74;
        }
        group shasta {
            type external;
            description "multiple context on Nortel Shasta";
            import [ color-external-neighbor set-comm-shasta prefix-shasta ];
            authentication-key "$9$cVvSrv2gJHqfgo39puEhVwYg4ZjHmP5F";
            export [ default-originate deny-all ];
            remove-private;
            neighbor 206.24.172.82 {
                description uklond1_01.bsn-a:cntx04;
                peer-as 65090;
            }
            neighbor 206.24.172.130 {
                description uklond1_01.bsn-a:cntx11;
                peer-as 65091;
            }
            neighbor 206.24.172.134 {
                description uklond1_01.bsn-a:cntx13;
                peer-as 65093;
            }
            neighbor 206.24.172.138 {
                description uklond1_01.bsn-a:cntx14;
                peer-as 65094;
            }
        }
    }
    isis {
        traceoptions {
            file log-adjacency-changes size 1m files 10;
            flag error;
            flag normal;
            flag state;
        }
        lsp-lifetime 65535;
        multicast-topology;
        level 1 wide-metrics-only;
        level 2 wide-metrics-only;
        interface at-1/1/0.950 {
            lsp-interval 50;
            level 2 {
                metric 35;
                hello-interval 10;
                hold-time 60;
            }
            level 1 disable;
        }
        interface at-1/1/0.960 {
            lsp-interval 50;
            level 2 {
                metric 10;
                hello-interval 10;
                hold-time 60;
            }
            level 1 disable;
        }
        interface at-1/1/0.970 {
            lsp-interval 50;
            level 2 {
                metric 10;
                hello-interval 10;
                hold-time 60;
            }
            level 1 disable;
        }
        interface as0.0 {
            lsp-interval 50;
            level 2 {
                metric 2;
                hello-interval 10;
                hold-time 60;
            }
            level 1 {
                metric 2;
                hello-interval 10;
                hold-time 60;
            }
        }
        interface lo0.0 {
            lsp-interval 50;
            passive;
            level 2 disable;
        }
    }
    ldp {
        traceoptions {
            file ldp-log size 1m files 10;
            flag error;
            flag state;
        }
        track-igp-metric;
        import block-general-ldp-routes;
        egress-policy export-sec-loopback;
        transport-address 208.174.15.156;
        interface at-1/1/0.950;
        interface at-1/1/0.960;
        interface at-1/1/0.970;
        interface as0.0;
        interface lo0.0;
    }
    pim {
        traceoptions {
            file pim size 8m files 2;
            flag general;
        }
        rib-group inet mcrg;
        rp {
            static {
                address 206.24.194.40;
            }
        }
        interface lo0.0 {
            mode sparse;
            version 2;
        }
        interface at-1/1/0.960 {
            mode sparse;
            version 2;
        }
        interface at-1/1/0.970 {
            mode sparse;
            version 2;
        }
    }
}
policy-options {
    prefix-list snmp-list {
        64.14.144.153/32;
        64.14.144.154/32;
        64.14.144.155/32;
        64.14.144.156/32;
        64.14.144.157/32;
        64.14.144.158/32;
        64.41.189.214/32;
        64.41.251.174/32;
        64.242.52.23/32;
        167.215.232.0/24;
        204.70.128.30/32;
        204.70.128.31/32;
        204.70.128.81/32;
        204.70.128.202/32;
        204.70.133.240/32;
        204.70.133.243/32;
        204.70.133.244/32;
        204.71.36.18/32;
        204.71.36.39/32;
        204.71.36.225/32;
        204.71.40.160/32;
        206.24.168.45/32;
        206.24.209.15/32;
        206.24.224.24/32;
        206.24.224.25/32;
        208.172.0.23/32;
        208.172.0.25/32;
        208.172.33.25/32;
        208.172.64.23/32;
        208.172.80.23/32;
        208.172.128.23/32;
        208.172.160.23/32;
        208.172.225.6/32;
        208.174.48.45/32;
        208.174.56.45/32;
        208.175.109.17/32;
        208.175.168.18/32;
        208.175.184.45/32;
        209.83.194.12/32;
        209.83.194.104/32;
        209.83.194.105/32;
        209.83.194.106/32;
        209.83.194.107/32;
        209.83.194.108/32;
        209.83.194.109/32;
        209.83.194.110/32;
        209.83.194.111/32;
        209.83.194.112/32;
        209.83.194.113/32;
        209.83.194.114/32;
        209.83.194.115/32;
        209.83.194.188/32;
        209.83.194.221/32;
        209.83.194.222/32;
        209.83.194.224/32;
        209.83.194.225/32;
        209.83.194.226/32;
        209.83.194.228/32;
        209.83.194.231/32;
        209.83.194.251/32;
        209.225.10.240/32;
        216.33.108.73/32;
        216.33.108.75/32;
        216.74.153.230/32;
        216.177.76.156/32;
        216.182.78.36/32;
    }
    prefix-list ntp-list {
        apply-path "system ntp server <*>";
    }
    prefix-list syslog-list {
        204.70.133.240/32;
        204.71.36.44/32;
        204.71.36.45/32;
        216.90.89.68/32;
    }
    prefix-list ssh-list {
        64.41.189.214/32;
        167.215.232.85/32;
        204.70.3.0/24;
        204.70.133.240/32;
        204.70.133.243/32;
        204.70.133.244/32;
        204.71.36.0/23;
        204.71.247.104/32;
        206.24.168.0/25;
        206.24.194.0/25;
        206.24.210.0/25;
        206.24.226.0/25;
        208.172.2.0/25;
        208.172.18.0/25;
        208.172.34.0/25;
        208.172.50.0/25;
        208.172.66.0/25;
        208.172.82.0/25;
        208.172.98.0/25;
        208.172.130.0/25;
        208.172.146.0/25;
        208.172.162.0/25;
        208.172.226.0/25;
        208.174.2.0/25;
        208.174.15.0/24;
        208.174.48.0/25;
        208.174.56.0/25;
        208.175.170.0/25;
        208.175.184.0/25;
        209.1.40.0/24;
        209.1.220.0/24;
        209.83.159.0/24;
        209.83.194.0/24;
        209.225.10.235/32;
        212.124.244.44/32;
        216.33.108.73/32;
        216.35.132.15/32;
    }
    prefix-list bgp-list {
        apply-path "protocols bgp group <*> neighbor <*>";
    }
    prefix-list non-routable-list {
        0.0.0.0/7;
        2.0.0.0/8;
        5.0.0.0/8;
        7.0.0.0/8;
        10.0.0.0/8;
        23.0.0.0/8;
        27.0.0.0/8;
        31.0.0.0/8;
        36.0.0.0/7;
        39.0.0.0/8;
        42.0.0.0/8;
        49.0.0.0/8;
        50.0.0.0/8;
        77.0.0.0/8;
        78.0.0.0/7;
        92.0.0.0/6;
        96.0.0.0/4;
        112.0.0.0/5;
        120.0.0.0/8;
        127.0.0.0/8;
        169.254.0.0/16;
        172.16.0.0/12;
        173.0.0.0/8;
        174.0.0.0/7;
        176.0.0.0/5;
        184.0.0.0/6;
        192.0.2.0/24;
        192.168.0.0/16;
        197.0.0.0/8;
        198.18.0.0/15;
        223.0.0.0/8;
        224.0.0.0/3;
    }
    prefix-list accept-prot-55 {
        24.237.7.155/32;
        130.76.118.134/32;
        134.205.148.227/32;
        192.187.8.122/32;
    }
    prefix-list SObigF_prefix {
        12.158.102.205/32;
        12.232.104.221/32;
        24.33.66.38/32;
        24.197.143.132/32;
        24.202.91.43/32;
        24.206.75.137/32;
        24.210.182.156/32;
        61.38.18.59/32;
        63.250.82.87/32;
        65.92.80.218/32;
        65.92.186.145/32;
        65.93.81.59/32;
        65.95.193.138/32;
        65.177.240.194/32;
        66.131.207.81/32;
        67.9.241.67/32;
        67.73.21.6/32;
        68.38.159.161/32;
        68.50.20.96/32;
        218.147.164.29/32;
    }
    prefix-list bad-guys-list {
        204.70.0.0/32;
    }
    prefix-list ddos-target-list {
        204.70.0.0/32;
    }
    prefix-list ldp-list {
        202.126.0.4/32;
        206.24.194.103/32;
        206.24.194.104/32;
        206.24.226.97/32;
        206.24.226.98/32;
        208.172.130.101/32;
        208.172.130.102/32;
        208.172.162.17/32;
        208.172.162.18/32;
        208.173.155.168/32;
        208.174.15.1/32;
        208.174.15.2/32;
        208.174.15.3/32;
        208.174.15.4/32;
        208.174.15.5/32;
        208.174.15.6/32;
        208.174.15.8/32;
        208.174.15.9/32;
        208.174.15.10/32;
        208.174.15.12/32;
        208.174.15.13/32;
        208.174.15.14/32;
        208.174.15.15/32;
        208.174.15.16/32;
        208.174.15.17/32;
        208.174.15.18/32;
        208.174.15.19/32;
        208.174.15.21/32;
        208.174.15.22/32;
        208.174.15.23/32;
        208.174.15.25/32;
        208.174.15.26/32;
        208.174.15.31/32;
        208.174.15.32/32;
        208.174.15.33/32;
        208.174.15.34/32;
        208.174.15.35/32;
        208.174.15.36/32;
        208.174.15.37/32;
        208.174.15.38/32;
        208.174.15.39/32;
        208.174.15.40/32;
        208.174.15.41/32;
        208.174.15.42/32;
        208.174.15.43/32;
        208.174.15.44/32;
        208.174.15.45/32;
        208.174.15.46/32;
        208.174.15.47/32;
        208.174.15.48/32;
        208.174.15.50/32;
        208.174.15.51/32;
        208.174.15.52/32;
        208.174.15.53/32;
        208.174.15.54/32;
        208.174.15.55/32;
        208.174.15.56/32;
        208.174.15.58/32;
        208.174.15.60/32;
        208.174.15.61/32;
        208.174.15.62/32;
        208.174.15.63/32;
        208.174.15.64/32;
        208.174.15.66/32;
        208.174.15.67/32;
        208.174.15.68/32;
        208.174.15.70/32;
        208.174.15.72/32;
        208.174.15.73/32;
        208.174.15.74/32;
        208.174.15.76/32;
        208.174.15.80/32;
        208.174.15.81/32;
        208.174.15.96/32;
        208.174.15.97/32;
        208.174.15.98/32;
        208.174.15.100/32;
        208.174.15.101/32;
        208.174.15.106/32;
        208.174.15.107/32;
        208.174.15.108/32;
        208.174.15.109/32;
        208.174.15.130/32;
        208.174.15.131/32;
        208.174.15.141/32;
        208.174.15.143/32;
        208.174.15.144/32;
        208.174.15.146/32;
        208.174.15.149/32;
        208.174.15.156/32;
        208.174.15.157/32;
        208.174.15.158/32;
        208.174.15.159/32;
        208.174.15.160/32;
        209.83.159.1/32;
        209.83.159.3/32;
        209.83.159.4/32;
        209.83.159.6/32;
        209.83.159.7/32;
        209.83.159.106/32;
        209.83.159.107/32;
        209.83.159.115/32;
    }
    prefix-list msdp-list {
        apply-path "protocols msdp group <*> peer <*>";
    }
    prefix-list dns-list {
        apply-path "system name-server <*>";
    }
    prefix-list pim {
        apply-path "policy-options policy-statement announce-networks term announce-networks from route-filter <*> ";
    }
    prefix-list radius-list {
        apply-path "system radius-server <*>";
    }
    prefix-list core-list {
        204.70.3.0/24;
        206.24.168.0/25;
        206.24.194.0/25;
        206.24.210.0/25;
        206.24.226.0/25;
        208.172.2.0/25;
        208.172.18.0/25;
        208.172.34.0/25;
        208.172.50.0/25;
        208.172.66.0/25;
        208.172.82.0/25;
        208.172.98.0/25;
        208.172.130.0/25;
        208.172.146.0/25;
        208.172.162.0/25;
        208.172.226.0/25;
        208.174.2.0/25;
        208.174.15.0/24;
        208.174.48.0/25;
        208.174.56.0/25;
        208.175.170.0/25;
        208.175.184.0/25;
        209.1.40.0/24;
        209.1.220.0/24;
        209.83.159.0/24;
    }
    prefix-list host-list {
        63.136.120.0/21;
        64.41.189.214/32;
        167.215.232.0/24;
        167.215.232.85/32;
        204.70.133.240/32;
        204.70.133.243/32;
        204.70.133.244/32;
        204.71.36.0/23;
        204.71.39.13/32;
        204.71.247.104/32;
        206.24.172.144/32;
        209.83.194.0/24;
        209.225.10.235/32;
        212.124.244.44/32;
        216.33.108.73/32;
        216.35.132.15/32;
    }
    policy-statement next-hop-self {
        from color 135;
        then {
            next-hop self;
        }
    }
    policy-statement color-external-neighbor {
        then {
            color 135;
        }
    }
    policy-statement filter-resrv-swamp-prefix {
        term step1 {
            from {
                route-filter 0.0.0.0/7 orlonger reject;
                route-filter 2.0.0.0/8 orlonger reject;
                route-filter 5.0.0.0/8 orlonger reject;
                route-filter 7.0.0.0/8 orlonger reject;
                route-filter 10.0.0.0/8 orlonger reject;
                route-filter 23.0.0.0/8 orlonger reject;
                route-filter 27.0.0.0/8 orlonger reject;
                route-filter 31.0.0.0/8 orlonger reject;
                route-filter 36.0.0.0/7 orlonger reject;
                route-filter 39.0.0.0/8 orlonger reject;
                route-filter 42.0.0.0/8 orlonger reject;
                route-filter 49.0.0.0/8 orlonger reject;
                route-filter 50.0.0.0/8 orlonger reject;
                route-filter 77.0.0.0/8 orlonger reject;
                route-filter 78.0.0.0/7 orlonger reject;
                route-filter 92.0.0.0/6 orlonger reject;
                route-filter 96.0.0.0/4 orlonger reject;
                route-filter 112.0.0.0/5 orlonger reject;
                route-filter 127.0.0.0/8 orlonger reject;
                route-filter 169.254.0.0/16 orlonger reject;
                route-filter 172.16.0.0/12 orlonger reject;
                route-filter 173.0.0.0/8 orlonger reject;
                route-filter 174.0.0.0/7 orlonger reject;
                route-filter 176.0.0.0/5 orlonger reject;
                route-filter 184.0.0.0/6 orlonger reject;
                route-filter 192.0.2.0/24 orlonger reject;
                route-filter 192.168.0.0/16 orlonger reject;
                route-filter 197.0.0.0/8 orlonger reject;
                route-filter 198.18.0.0/15 orlonger reject;
                route-filter 223.0.0.0/8 orlonger reject;
                route-filter 224.0.0.0/3 orlonger reject;
                route-filter 120.0.0.0/8 orlonger reject;
            }
        }
        term step2 {
            from {
                route-filter 0.0.0.0/0 upto /6;
            }
            then reject;
        }
        term step3 {
            from {
                route-filter 0.0.0.0/0 upto /24 next policy;
            }
        }
        term step4 {
            then reject;
        }
    }
    policy-statement filter-multihomed-customer {
        from as-path swamp;
        then reject;
    }
    policy-statement cisco-damping {
        then damping cisco;
    }
    policy-statement export-full-routes {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-customer;
            then {
                community delete comm-wild;
                accept;
            }
        }
        term comm-peer {
            from community comm-peer;
            then {
                community delete comm-wild;
                accept;
            }
        }
        then {
            community delete comm-wild;
            next policy;
        }
    }
    policy-statement private-as-filter {
        from as-path private-as;
        then reject;
    }
    policy-statement filter-specifics {
        term one {
            from {
                route-filter 199.242.24.0/23 exact;
                route-filter 206.220.224.0/22 exact;
                route-filter 209.27.56.0/22 exact;
                route-filter 206.128.220.0/22 exact;
                route-filter 204.188.128.0/21 exact;
                route-filter 207.189.88.0/21 exact;
                route-filter 206.154.56.0/21 exact;
                route-filter 63.136.120.0/21 exact;
                route-filter 206.99.112.0/21 exact;
                route-filter 206.97.16.0/21 exact;
                route-filter 208.138.160.0/21 exact;
                route-filter 208.157.152.0/21 exact;
                route-filter 199.242.16.0/21 exact;
                route-filter 206.128.208.0/21 exact;
                route-filter 204.194.8.0/21 exact;
                route-filter 209.143.192.0/20 exact;
                route-filter 216.118.192.0/20 exact;
                route-filter 206.97.0.0/20 exact;
                route-filter 66.128.224.0/20 exact;
                route-filter 66.128.64.0/20 exact;
                route-filter 206.28.160.0/20 exact;
                route-filter 216.144.64.0/20 exact;
                route-filter 206.151.32.0/20 exact;
                route-filter 216.182.160.0/20 exact;
                route-filter 216.182.64.0/20 exact;
                route-filter 216.19.160.0/20 exact;
                route-filter 216.219.64.0/20 exact;
                route-filter 216.219.96.0/20 exact;
                route-filter 206.132.32.0/20 exact;
                route-filter 216.224.96.0/20 exact;
                route-filter 205.140.160.0/20 exact;
                route-filter 216.227.224.0/20 exact;
                route-filter 206.154.32.0/20 exact;
                route-filter 216.39.32.0/20 exact;
                route-filter 216.39.96.0/20 exact;
                route-filter 216.48.64.0/20 exact;
                route-filter 216.69.224.0/20 exact;
                route-filter 64.15.192.0/20 exact;
                route-filter 216.227.192.0/20 exact;
                route-filter 216.14.160.0/20 exact;
                route-filter 64.209.128.0/20 exact;
                route-filter 64.209.192.0/20 exact;
                route-filter 206.29.128.0/20 exact;
                route-filter 64.253.192.0/20 exact;
                route-filter 206.132.144.0/20 exact;
                route-filter 64.27.160.0/20 exact;
                route-filter 64.56.192.0/20 exact;
                route-filter 64.70.96.0/20 exact;
                route-filter 64.79.160.0/20 exact;
                route-filter 208.138.0.0/20 exact;
                route-filter 208.138.176.0/20 exact;
                route-filter 64.89.32.0/20 exact;
                route-filter 64.92.160.0/20 exact;
                route-filter 208.157.128.0/20 exact;
                route-filter 207.189.64.0/20 exact;
                route-filter 206.99.96.0/20 exact;
                route-filter 209.27.32.0/20 exact;
                route-filter 204.188.144.0/20 exact;
                route-filter 63.136.96.0/20 exact;
                route-filter 208.167.208.0/20 exact;
                route-filter 66.119.32.0/20 exact;
                route-filter 208.48.208.0/20 exact;
                route-filter 206.97.32.0/19 exact;
                route-filter 64.209.224.0/19 exact;
                route-filter 199.217.64.0/19 exact;
                route-filter 213.174.192.0/19 exact;
                route-filter 166.63.128.0/19 exact;
                route-filter 206.28.128.0/19 exact;
                route-filter 206.153.64.0/19 exact;
                route-filter 207.50.160.0/19 exact;
                route-filter 205.140.128.0/19 exact;
                route-filter 206.132.0.0/19 exact;
                route-filter 64.209.160.0/19 exact;
                route-filter 208.168.192.0/19 exact;
                route-filter 209.27.0.0/19 exact;
                route-filter 64.15.224.0/19 exact;
                route-filter 64.15.160.0/19 exact;
                route-filter 216.64.192.0/19 exact;
                route-filter 206.40.64.0/19 exact;
                route-filter 206.154.0.0/19 exact;
                route-filter 208.169.96.0/19 exact;
                route-filter 208.175.192.0/19 exact;
                route-filter 206.99.64.0/19 exact;
                route-filter 208.163.0.0/19 exact;
                route-filter 212.124.224.0/19 exact;
                route-filter 208.138.128.0/19 exact;
                route-filter 207.2.64.0/19 exact;
                route-filter 208.166.0.0/19 exact;
                route-filter 206.24.160.0/19 exact;
                route-filter 208.175.160.0/19 exact;
                route-filter 66.37.192.0/19 exact;
                route-filter 206.151.0.0/19 exact;
                route-filter 216.39.64.0/19 exact;
                route-filter 205.217.192.0/19 exact;
                route-filter 216.19.128.0/19 exact;
                route-filter 216.182.192.0/19 exact;
                route-filter 206.128.224.0/19 exact;
                route-filter 216.177.64.0/19 exact;
                route-filter 216.109.64.0/19 exact;
                route-filter 216.104.224.0/19 exact;
                route-filter 209.225.64.0/19 exact;
                route-filter 209.143.224.0/19 exact;
                route-filter 204.188.160.0/19 exact;
                route-filter 206.96.96.0/19 exact;
                route-filter 209.16.192.0/19 exact;
                route-filter 82.118.64.0/19 exact;
                route-filter 206.128.0.0/19 exact;
                route-filter 206.40.128.0/19 exact;
                route-filter 208.132.64.0/19 exact;
                route-filter 64.210.160.0/19 exact;
                route-filter 64.211.224.0/19 exact;
                route-filter 64.22.128.0/19 exact;
                route-filter 64.28.64.0/19 exact;
                route-filter 64.39.32.0/19 exact;
                route-filter 64.58.64.0/19 exact;
                route-filter 64.68.64.0/19 exact;
                route-filter 64.70.64.0/19 exact;
                route-filter 63.136.64.0/19 exact;
                route-filter 208.163.64.0/18 exact;
                route-filter 208.173.128.0/18 exact;
                route-filter 205.140.192.0/18 exact;
                route-filter 206.97.64.0/18 exact;
                route-filter 208.169.0.0/18 exact;
                route-filter 207.50.192.0/18 exact;
                route-filter 209.44.0.0/18 exact;
                route-filter 206.24.192.0/18 exact;
                route-filter 206.99.0.0/18 exact;
                route-filter 208.168.128.0/18 exact;
                route-filter 206.128.128.0/18 exact;
                route-filter 206.151.64.0/18 exact;
                route-filter 206.153.0.0/18 exact;
                route-filter 208.132.0.0/18 exact;
                route-filter 208.48.64.0/18 exact;
                route-filter 208.50.128.0/18 exact;
                route-filter 209.202.128.0/18 exact;
                route-filter 209.225.0.0/18 exact;
                route-filter 208.138.192.0/18 exact;
                route-filter 208.138.64.0/18 exact;
                route-filter 208.157.192.0/18 exact;
                route-filter 205.217.128.0/18 exact;
                route-filter 207.2.0.0/18 exact;
                route-filter 216.74.128.0/18 exact;
                route-filter 66.35.192.0/18 exact;
                route-filter 64.210.192.0/18 exact;
                route-filter 64.85.64.0/18 exact;
                route-filter 206.28.192.0/18 exact;
                route-filter 209.27.64.0/18 exact;
                route-filter 208.167.128.0/18 exact;
                route-filter 64.37.192.0/18 exact;
                route-filter 206.96.0.0/18 exact;
                route-filter 206.29.192.0/18 exact;
                route-filter 206.154.64.0/18 exact;
                route-filter 64.70.0.0/18 exact;
                route-filter 208.131.192.0/18 exact;
                route-filter 63.136.0.0/18 exact;
                route-filter 64.75.0.0/18 exact;
                route-filter 208.166.64.0/18 exact;
                route-filter 209.83.128.0/17 exact;
                route-filter 207.50.0.0/17 exact;
                route-filter 167.216.128.0/17 exact;
                route-filter 146.135.0.0/17 exact;
                route-filter 205.217.0.0/17 exact;
                route-filter 208.168.0.0/17 exact;
                route-filter 206.28.0.0/17 exact;
                route-filter 206.29.0.0/17 exact;
                route-filter 208.169.128.0/17 exact;
                route-filter 206.154.128.0/17 exact;
                route-filter 166.49.0.0/17 exact;
                route-filter 207.2.128.0/17 exact;
                route-filter 206.97.128.0/17 exact;
                route-filter 205.140.0.0/17 exact;
                route-filter 206.153.128.0/17 exact;
                route-filter 208.132.128.0/17 exact;
                route-filter 208.163.128.0/17 exact;
                route-filter 206.96.128.0/17 exact;
                route-filter 208.173.0.0/17 exact;
                route-filter 209.102.0.0/17 exact;
                route-filter 208.175.0.0/17 exact;
                route-filter 63.136.128.0/17 exact;
                route-filter 209.25.0.0/17 exact;
                route-filter 208.157.0.0/17 exact;
                route-filter 208.166.128.0/17 exact;
                route-filter 67.54.0.0/17 exact;
                route-filter 64.41.128.0/17 exact;
                route-filter 209.27.128.0/17 exact;
                route-filter 206.151.128.0/17 exact;
                route-filter 208.167.0.0/17 exact;
                route-filter 204.188.0.0/17 exact;
                route-filter 206.24.0.0/17 exact;
                route-filter 208.131.0.0/17 exact;
                route-filter 216.136.128.0/17 exact;
                route-filter 206.99.128.0/17 exact;
                route-filter 204.189.0.0/16 exact;
                route-filter 206.79.0.0/16 exact;
                route-filter 208.162.0.0/16 exact;
                route-filter 207.82.0.0/16 exact;
                route-filter 207.149.0.0/16 exact;
                route-filter 209.176.0.0/16 exact;
                route-filter 206.142.0.0/16 exact;
                route-filter 205.136.0.0/16 exact;
                route-filter 64.14.0.0/16 exact;
                route-filter 207.124.0.0/16 exact;
                route-filter 207.3.0.0/16 exact;
                route-filter 209.1.0.0/16 exact;
                route-filter 208.156.0.0/16 exact;
                route-filter 206.129.0.0/16 exact;
                route-filter 208.139.0.0/16 exact;
                route-filter 209.223.0.0/16 exact;
                route-filter 209.144.0.0/16 exact;
                route-filter 209.185.0.0/16 exact;
                route-filter 206.98.0.0/16 exact;
                route-filter 206.150.0.0/16 exact;
                route-filter 206.152.0.0/16 exact;
                route-filter 209.67.0.0/16 exact;
                route-filter 206.155.0.0/16 exact;
                route-filter 207.51.0.0/16 exact;
                route-filter 208.130.0.0/16 exact;
                route-filter 63.137.0.0/16 exact;
                route-filter 206.25.0.0/16 exact;
                route-filter 208.133.0.0/16 exact;
                route-filter 165.193.0.0/16 exact;
                route-filter 167.215.0.0/16 exact;
                route-filter 208.172.0.0/16 exact;
                route-filter 205.216.0.0/16 exact;
                route-filter 208.174.0.0/16 exact;
                route-filter 207.48.0.0/15 exact;
                route-filter 208.160.0.0/15 exact;
                route-filter 63.128.0.0/15 exact;
                route-filter 208.164.0.0/15 exact;
                route-filter 204.70.0.0/15 exact;
                route-filter 206.156.0.0/15 exact;
                route-filter 208.158.0.0/15 exact;
                route-filter 208.170.0.0/15 exact;
                route-filter 208.134.0.0/15 exact;
                route-filter 206.30.0.0/15 exact;
                route-filter 208.136.0.0/15 exact;
                route-filter 66.100.0.0/15 exact;
                route-filter 208.128.0.0/15 exact;
                route-filter 205.218.0.0/15 exact;
                route-filter 207.0.0.0/15 exact;
                route-filter 205.138.0.0/15 exact;
                route-filter 206.26.0.0/15 exact;
                route-filter 206.100.0.0/14 exact;
                route-filter 216.88.0.0/14 exact;
                route-filter 64.240.0.0/14 exact;
                route-filter 208.140.0.0/14 exact;
                route-filter 216.32.0.0/14 exact;
                route-filter 208.152.0.0/14 exact;
                route-filter 208.144.0.0/13 exact;
            }
            then accept;
        }
        term two {
            from {
                route-filter 199.242.24.0/23 longer reject;
                route-filter 206.220.224.0/22 longer reject;
                route-filter 209.27.56.0/22 longer reject;
                route-filter 206.128.220.0/22 longer reject;
                route-filter 204.188.128.0/21 longer reject;
                route-filter 207.189.88.0/21 longer reject;
                route-filter 206.154.56.0/21 longer reject;
                route-filter 63.136.120.0/21 longer reject;
                route-filter 206.99.112.0/21 longer reject;
                route-filter 206.97.16.0/21 longer reject;
                route-filter 208.138.160.0/21 longer reject;
                route-filter 208.157.152.0/21 longer reject;
                route-filter 199.242.16.0/21 longer reject;
                route-filter 206.128.208.0/21 longer reject;
                route-filter 204.194.8.0/21 longer reject;
                route-filter 209.143.192.0/20 longer reject;
                route-filter 216.118.192.0/20 longer reject;
                route-filter 206.97.0.0/20 longer reject;
                route-filter 66.128.224.0/20 longer reject;
                route-filter 66.128.64.0/20 longer reject;
                route-filter 206.28.160.0/20 longer reject;
                route-filter 216.144.64.0/20 longer reject;
                route-filter 206.151.32.0/20 longer reject;
                route-filter 216.182.160.0/20 longer reject;
                route-filter 216.182.64.0/20 longer reject;
                route-filter 216.19.160.0/20 longer reject;
                route-filter 216.219.64.0/20 longer reject;
                route-filter 216.219.96.0/20 longer reject;
                route-filter 206.132.32.0/20 longer reject;
                route-filter 216.224.96.0/20 longer reject;
                route-filter 205.140.160.0/20 longer reject;
                route-filter 216.227.224.0/20 longer reject;
                route-filter 206.154.32.0/20 longer reject;
                route-filter 216.39.32.0/20 longer reject;
                route-filter 216.39.96.0/20 longer reject;
                route-filter 216.48.64.0/20 longer reject;
                route-filter 216.69.224.0/20 longer reject;
                route-filter 64.15.192.0/20 longer reject;
                route-filter 216.227.192.0/20 longer reject;
                route-filter 216.14.160.0/20 longer reject;
                route-filter 64.209.128.0/20 longer reject;
                route-filter 64.209.192.0/20 longer reject;
                route-filter 206.29.128.0/20 longer reject;
                route-filter 64.253.192.0/20 longer reject;
                route-filter 206.132.144.0/20 longer reject;
                route-filter 64.27.160.0/20 longer reject;
                route-filter 64.56.192.0/20 longer reject;
                route-filter 64.70.96.0/20 longer reject;
                route-filter 64.79.160.0/20 longer reject;
                route-filter 208.138.0.0/20 longer reject;
                route-filter 208.138.176.0/20 longer reject;
                route-filter 64.89.32.0/20 longer reject;
                route-filter 64.92.160.0/20 longer reject;
                route-filter 208.157.128.0/20 longer reject;
                route-filter 207.189.64.0/20 longer reject;
                route-filter 206.99.96.0/20 longer reject;
                route-filter 209.27.32.0/20 longer reject;
                route-filter 204.188.144.0/20 longer reject;
                route-filter 63.136.96.0/20 longer reject;
                route-filter 208.167.208.0/20 longer reject;
                route-filter 66.119.32.0/20 longer reject;
                route-filter 208.48.208.0/20 longer reject;
                route-filter 206.97.32.0/19 longer reject;
                route-filter 64.209.224.0/19 longer reject;
                route-filter 199.217.64.0/19 longer reject;
                route-filter 213.174.192.0/19 longer reject;
                route-filter 166.63.128.0/19 longer reject;
                route-filter 206.28.128.0/19 longer reject;
                route-filter 206.153.64.0/19 longer reject;
                route-filter 207.50.160.0/19 longer reject;
                route-filter 205.140.128.0/19 longer reject;
                route-filter 206.132.0.0/19 longer reject;
                route-filter 64.209.160.0/19 longer reject;
                route-filter 208.168.192.0/19 longer reject;
                route-filter 209.27.0.0/19 longer reject;
                route-filter 64.15.224.0/19 longer reject;
                route-filter 64.15.160.0/19 longer reject;
                route-filter 216.64.192.0/19 longer reject;
                route-filter 206.40.64.0/19 longer reject;
                route-filter 206.154.0.0/19 longer reject;
                route-filter 208.169.96.0/19 longer reject;
                route-filter 208.175.192.0/19 longer reject;
                route-filter 206.99.64.0/19 longer reject;
                route-filter 208.163.0.0/19 longer reject;
                route-filter 212.124.224.0/19 longer reject;
                route-filter 208.138.128.0/19 longer reject;
                route-filter 207.2.64.0/19 longer reject;
                route-filter 208.166.0.0/19 longer reject;
                route-filter 206.24.160.0/19 longer reject;
                route-filter 208.175.160.0/19 longer reject;
                route-filter 66.37.192.0/19 longer reject;
                route-filter 206.151.0.0/19 longer reject;
                route-filter 216.39.64.0/19 longer reject;
                route-filter 205.217.192.0/19 longer reject;
                route-filter 216.19.128.0/19 longer reject;
                route-filter 216.182.192.0/19 longer reject;
                route-filter 206.128.224.0/19 longer reject;
                route-filter 216.177.64.0/19 longer reject;
                route-filter 216.109.64.0/19 longer reject;
                route-filter 216.104.224.0/19 longer reject;
                route-filter 209.225.64.0/19 longer reject;
                route-filter 209.143.224.0/19 longer reject;
                route-filter 204.188.160.0/19 longer reject;
                route-filter 206.96.96.0/19 longer reject;
                route-filter 209.16.192.0/19 longer reject;
                route-filter 82.118.64.0/19 longer reject;
                route-filter 206.128.0.0/19 longer reject;
                route-filter 206.40.128.0/19 longer reject;
                route-filter 208.132.64.0/19 longer reject;
                route-filter 64.210.160.0/19 longer reject;
                route-filter 64.211.224.0/19 longer reject;
                route-filter 64.22.128.0/19 longer reject;
                route-filter 64.28.64.0/19 longer reject;
                route-filter 64.39.32.0/19 longer reject;
                route-filter 64.58.64.0/19 longer reject;
                route-filter 64.68.64.0/19 longer reject;
                route-filter 64.70.64.0/19 longer reject;
                route-filter 63.136.64.0/19 longer reject;
                route-filter 208.163.64.0/18 longer reject;
                route-filter 208.173.128.0/18 longer reject;
                route-filter 205.140.192.0/18 longer reject;
                route-filter 206.97.64.0/18 longer reject;
                route-filter 208.169.0.0/18 longer reject;
                route-filter 207.50.192.0/18 longer reject;
                route-filter 209.44.0.0/18 longer reject;
                route-filter 206.24.192.0/18 longer reject;
                route-filter 206.99.0.0/18 longer reject;
                route-filter 208.168.128.0/18 longer reject;
                route-filter 206.128.128.0/18 longer reject;
                route-filter 206.151.64.0/18 longer reject;
                route-filter 206.153.0.0/18 longer reject;
                route-filter 208.132.0.0/18 longer reject;
                route-filter 208.48.64.0/18 longer reject;
                route-filter 208.50.128.0/18 longer reject;
                route-filter 209.202.128.0/18 longer reject;
                route-filter 209.225.0.0/18 longer reject;
                route-filter 208.138.192.0/18 longer reject;
                route-filter 208.138.64.0/18 longer reject;
                route-filter 208.157.192.0/18 longer reject;
                route-filter 205.217.128.0/18 longer reject;
                route-filter 207.2.0.0/18 longer reject;
                route-filter 216.74.128.0/18 longer reject;
                route-filter 66.35.192.0/18 longer reject;
                route-filter 64.210.192.0/18 longer reject;
                route-filter 64.85.64.0/18 longer reject;
                route-filter 206.28.192.0/18 longer reject;
                route-filter 209.27.64.0/18 longer reject;
                route-filter 208.167.128.0/18 longer reject;
                route-filter 64.37.192.0/18 longer reject;
                route-filter 206.96.0.0/18 longer reject;
                route-filter 206.29.192.0/18 longer reject;
                route-filter 206.154.64.0/18 longer reject;
                route-filter 64.70.0.0/18 longer reject;
                route-filter 208.131.192.0/18 longer reject;
                route-filter 63.136.0.0/18 longer reject;
                route-filter 64.75.0.0/18 longer reject;
                route-filter 208.166.64.0/18 longer reject;
                route-filter 209.83.128.0/17 longer reject;
                route-filter 207.50.0.0/17 longer reject;
                route-filter 167.216.128.0/17 longer reject;
                route-filter 146.135.0.0/17 longer reject;
                route-filter 205.217.0.0/17 longer reject;
                route-filter 208.168.0.0/17 longer reject;
                route-filter 206.28.0.0/17 longer reject;
                route-filter 206.29.0.0/17 longer reject;
                route-filter 208.169.128.0/17 longer reject;
                route-filter 206.154.128.0/17 longer reject;
                route-filter 166.49.0.0/17 longer reject;
                route-filter 207.2.128.0/17 longer reject;
                route-filter 206.97.128.0/17 longer reject;
                route-filter 205.140.0.0/17 longer reject;
                route-filter 206.153.128.0/17 longer reject;
                route-filter 208.132.128.0/17 longer reject;
                route-filter 208.163.128.0/17 longer reject;
                route-filter 206.96.128.0/17 longer reject;
                route-filter 208.173.0.0/17 longer reject;
                route-filter 209.102.0.0/17 longer reject;
                route-filter 208.175.0.0/17 longer reject;
                route-filter 63.136.128.0/17 longer reject;
                route-filter 209.25.0.0/17 longer reject;
                route-filter 208.157.0.0/17 longer reject;
                route-filter 208.166.128.0/17 longer reject;
                route-filter 67.54.0.0/17 longer reject;
                route-filter 64.41.128.0/17 longer reject;
                route-filter 209.27.128.0/17 longer reject;
                route-filter 206.151.128.0/17 longer reject;
                route-filter 208.167.0.0/17 longer reject;
                route-filter 204.188.0.0/17 longer reject;
                route-filter 206.24.0.0/17 longer reject;
                route-filter 208.131.0.0/17 longer reject;
                route-filter 216.136.128.0/17 longer reject;
                route-filter 206.99.128.0/17 longer reject;
                route-filter 204.189.0.0/16 longer reject;
                route-filter 206.79.0.0/16 longer reject;
                route-filter 208.162.0.0/16 longer reject;
                route-filter 207.82.0.0/16 longer reject;
                route-filter 207.149.0.0/16 longer reject;
                route-filter 209.176.0.0/16 longer reject;
                route-filter 206.142.0.0/16 longer reject;
                route-filter 205.136.0.0/16 longer reject;
                route-filter 64.14.0.0/16 longer reject;
                route-filter 207.124.0.0/16 longer reject;
                route-filter 207.3.0.0/16 longer reject;
                route-filter 209.1.0.0/16 longer reject;
                route-filter 208.156.0.0/16 longer reject;
                route-filter 206.129.0.0/16 longer reject;
                route-filter 208.139.0.0/16 longer reject;
                route-filter 209.223.0.0/16 longer reject;
                route-filter 209.144.0.0/16 longer reject;
                route-filter 209.185.0.0/16 longer reject;
                route-filter 206.98.0.0/16 longer reject;
                route-filter 206.150.0.0/16 longer reject;
                route-filter 206.152.0.0/16 longer reject;
                route-filter 209.67.0.0/16 longer reject;
                route-filter 206.155.0.0/16 longer reject;
                route-filter 207.51.0.0/16 longer reject;
                route-filter 208.130.0.0/16 longer reject;
                route-filter 63.137.0.0/16 longer reject;
                route-filter 206.25.0.0/16 longer reject;
                route-filter 208.133.0.0/16 longer reject;
                route-filter 165.193.0.0/16 longer reject;
                route-filter 167.215.0.0/16 longer reject;
                route-filter 208.172.0.0/16 longer reject;
                route-filter 205.216.0.0/16 longer reject;
                route-filter 208.174.0.0/16 longer reject;
                route-filter 207.48.0.0/15 longer reject;
                route-filter 208.160.0.0/15 longer reject;
                route-filter 63.128.0.0/15 longer reject;
                route-filter 208.164.0.0/15 longer reject;
                route-filter 204.70.0.0/15 longer reject;
                route-filter 206.156.0.0/15 longer reject;
                route-filter 208.158.0.0/15 longer reject;
                route-filter 208.170.0.0/15 longer reject;
                route-filter 208.134.0.0/15 longer reject;
                route-filter 206.30.0.0/15 longer reject;
                route-filter 208.136.0.0/15 longer reject;
                route-filter 66.100.0.0/15 longer reject;
                route-filter 208.128.0.0/15 longer reject;
                route-filter 205.218.0.0/15 longer reject;
                route-filter 207.0.0.0/15 longer reject;
                route-filter 205.138.0.0/15 longer reject;
                route-filter 206.26.0.0/15 longer reject;
                route-filter 206.100.0.0/14 longer reject;
                route-filter 216.88.0.0/14 longer reject;
                route-filter 64.240.0.0/14 longer reject;
                route-filter 208.140.0.0/14 longer reject;
                route-filter 216.32.0.0/14 longer reject;
                route-filter 208.152.0.0/14 longer reject;
                route-filter 208.144.0.0/13 longer reject;
            }
            then next policy;
        }
    }
    policy-statement find-specifics {
        term accept-specifics {
            from {
                route-filter 199.242.24.0/23 longer accept;
                route-filter 206.220.224.0/22 longer accept;
                route-filter 209.27.56.0/22 longer accept;
                route-filter 206.128.220.0/22 longer accept;
                route-filter 204.188.128.0/21 longer accept;
                route-filter 207.189.88.0/21 longer accept;
                route-filter 206.154.56.0/21 longer accept;
                route-filter 63.136.120.0/21 longer accept;
                route-filter 206.99.112.0/21 longer accept;
                route-filter 206.97.16.0/21 longer accept;
                route-filter 208.138.160.0/21 longer accept;
                route-filter 208.157.152.0/21 longer accept;
                route-filter 199.242.16.0/21 longer accept;
                route-filter 206.128.208.0/21 longer accept;
                route-filter 204.194.8.0/21 longer accept;
                route-filter 209.143.192.0/20 longer accept;
                route-filter 216.118.192.0/20 longer accept;
                route-filter 206.97.0.0/20 longer accept;
                route-filter 66.128.224.0/20 longer accept;
                route-filter 66.128.64.0/20 longer accept;
                route-filter 206.28.160.0/20 longer accept;
                route-filter 216.144.64.0/20 longer accept;
                route-filter 206.151.32.0/20 longer accept;
                route-filter 216.182.160.0/20 longer accept;
                route-filter 216.182.64.0/20 longer accept;
                route-filter 216.19.160.0/20 longer accept;
                route-filter 216.219.64.0/20 longer accept;
                route-filter 216.219.96.0/20 longer accept;
                route-filter 206.132.32.0/20 longer accept;
                route-filter 216.224.96.0/20 longer accept;
                route-filter 205.140.160.0/20 longer accept;
                route-filter 216.227.224.0/20 longer accept;
                route-filter 206.154.32.0/20 longer accept;
                route-filter 216.39.32.0/20 longer accept;
                route-filter 216.39.96.0/20 longer accept;
                route-filter 216.48.64.0/20 longer accept;
                route-filter 216.69.224.0/20 longer accept;
                route-filter 64.15.192.0/20 longer accept;
                route-filter 216.227.192.0/20 longer accept;
                route-filter 216.14.160.0/20 longer accept;
                route-filter 64.209.128.0/20 longer accept;
                route-filter 64.209.192.0/20 longer accept;
                route-filter 206.29.128.0/20 longer accept;
                route-filter 64.253.192.0/20 longer accept;
                route-filter 206.132.144.0/20 longer accept;
                route-filter 64.27.160.0/20 longer accept;
                route-filter 64.56.192.0/20 longer accept;
                route-filter 64.70.96.0/20 longer accept;
                route-filter 64.79.160.0/20 longer accept;
                route-filter 208.138.0.0/20 longer accept;
                route-filter 208.138.176.0/20 longer accept;
                route-filter 64.89.32.0/20 longer accept;
                route-filter 64.92.160.0/20 longer accept;
                route-filter 208.157.128.0/20 longer accept;
                route-filter 207.189.64.0/20 longer accept;
                route-filter 206.99.96.0/20 longer accept;
                route-filter 209.27.32.0/20 longer accept;
                route-filter 204.188.144.0/20 longer accept;
                route-filter 63.136.96.0/20 longer accept;
                route-filter 208.167.208.0/20 longer accept;
                route-filter 66.119.32.0/20 longer accept;
                route-filter 208.48.208.0/20 longer accept;
                route-filter 206.97.32.0/19 longer accept;
                route-filter 64.209.224.0/19 longer accept;
                route-filter 199.217.64.0/19 longer accept;
                route-filter 213.174.192.0/19 longer accept;
                route-filter 166.63.128.0/19 longer accept;
                route-filter 206.28.128.0/19 longer accept;
                route-filter 206.153.64.0/19 longer accept;
                route-filter 207.50.160.0/19 longer accept;
                route-filter 205.140.128.0/19 longer accept;
                route-filter 206.132.0.0/19 longer accept;
                route-filter 64.209.160.0/19 longer accept;
                route-filter 208.168.192.0/19 longer accept;
                route-filter 209.27.0.0/19 longer accept;
                route-filter 64.15.224.0/19 longer accept;
                route-filter 64.15.160.0/19 longer accept;
                route-filter 216.64.192.0/19 longer accept;
                route-filter 206.40.64.0/19 longer accept;
                route-filter 206.154.0.0/19 longer accept;
                route-filter 208.169.96.0/19 longer accept;
                route-filter 208.175.192.0/19 longer accept;
                route-filter 206.99.64.0/19 longer accept;
                route-filter 208.163.0.0/19 longer accept;
                route-filter 212.124.224.0/19 longer accept;
                route-filter 208.138.128.0/19 longer accept;
                route-filter 207.2.64.0/19 longer accept;
                route-filter 208.166.0.0/19 longer accept;
                route-filter 206.24.160.0/19 longer accept;
                route-filter 208.175.160.0/19 longer accept;
                route-filter 66.37.192.0/19 longer accept;
                route-filter 206.151.0.0/19 longer accept;
                route-filter 216.39.64.0/19 longer accept;
                route-filter 205.217.192.0/19 longer accept;
                route-filter 216.19.128.0/19 longer accept;
                route-filter 216.182.192.0/19 longer accept;
                route-filter 206.128.224.0/19 longer accept;
                route-filter 216.177.64.0/19 longer accept;
                route-filter 216.109.64.0/19 longer accept;
                route-filter 216.104.224.0/19 longer accept;
                route-filter 209.225.64.0/19 longer accept;
                route-filter 209.143.224.0/19 longer accept;
                route-filter 204.188.160.0/19 longer accept;
                route-filter 206.96.96.0/19 longer accept;
                route-filter 209.16.192.0/19 longer accept;
                route-filter 82.118.64.0/19 longer accept;
                route-filter 206.128.0.0/19 longer accept;
                route-filter 206.40.128.0/19 longer accept;
                route-filter 208.132.64.0/19 longer accept;
                route-filter 64.210.160.0/19 longer accept;
                route-filter 64.211.224.0/19 longer accept;
                route-filter 64.22.128.0/19 longer accept;
                route-filter 64.28.64.0/19 longer accept;
                route-filter 64.39.32.0/19 longer accept;
                route-filter 64.58.64.0/19 longer accept;
                route-filter 64.68.64.0/19 longer accept;
                route-filter 64.70.64.0/19 longer accept;
                route-filter 63.136.64.0/19 longer accept;
                route-filter 208.163.64.0/18 longer accept;
                route-filter 208.173.128.0/18 longer accept;
                route-filter 205.140.192.0/18 longer accept;
                route-filter 206.97.64.0/18 longer accept;
                route-filter 208.169.0.0/18 longer accept;
                route-filter 207.50.192.0/18 longer accept;
                route-filter 209.44.0.0/18 longer accept;
                route-filter 206.24.192.0/18 longer accept;
                route-filter 206.99.0.0/18 longer accept;
                route-filter 208.168.128.0/18 longer accept;
                route-filter 206.128.128.0/18 longer accept;
                route-filter 206.151.64.0/18 longer accept;
                route-filter 206.153.0.0/18 longer accept;
                route-filter 208.132.0.0/18 longer accept;
                route-filter 208.48.64.0/18 longer accept;
                route-filter 208.50.128.0/18 longer accept;
                route-filter 209.202.128.0/18 longer accept;
                route-filter 209.225.0.0/18 longer accept;
                route-filter 208.138.192.0/18 longer accept;
                route-filter 208.138.64.0/18 longer accept;
                route-filter 208.157.192.0/18 longer accept;
                route-filter 205.217.128.0/18 longer accept;
                route-filter 207.2.0.0/18 longer accept;
                route-filter 216.74.128.0/18 longer accept;
                route-filter 66.35.192.0/18 longer accept;
                route-filter 64.210.192.0/18 longer accept;
                route-filter 64.85.64.0/18 longer accept;
                route-filter 206.28.192.0/18 longer accept;
                route-filter 209.27.64.0/18 longer accept;
                route-filter 208.167.128.0/18 longer accept;
                route-filter 64.37.192.0/18 longer accept;
                route-filter 206.96.0.0/18 longer accept;
                route-filter 206.29.192.0/18 longer accept;
                route-filter 206.154.64.0/18 longer accept;
                route-filter 64.70.0.0/18 longer accept;
                route-filter 208.131.192.0/18 longer accept;
                route-filter 63.136.0.0/18 longer accept;
                route-filter 64.75.0.0/18 longer accept;
                route-filter 208.166.64.0/18 longer accept;
                route-filter 209.83.128.0/17 longer accept;
                route-filter 207.50.0.0/17 longer accept;
                route-filter 167.216.128.0/17 longer accept;
                route-filter 146.135.0.0/17 longer accept;
                route-filter 205.217.0.0/17 longer accept;
                route-filter 208.168.0.0/17 longer accept;
                route-filter 206.28.0.0/17 longer accept;
                route-filter 206.29.0.0/17 longer accept;
                route-filter 208.169.128.0/17 longer accept;
                route-filter 206.154.128.0/17 longer accept;
                route-filter 166.49.0.0/17 longer accept;
                route-filter 207.2.128.0/17 longer accept;
                route-filter 206.97.128.0/17 longer accept;
                route-filter 205.140.0.0/17 longer accept;
                route-filter 206.153.128.0/17 longer accept;
                route-filter 208.132.128.0/17 longer accept;
                route-filter 208.163.128.0/17 longer accept;
                route-filter 206.96.128.0/17 longer accept;
                route-filter 208.173.0.0/17 longer accept;
                route-filter 209.102.0.0/17 longer accept;
                route-filter 208.175.0.0/17 longer accept;
                route-filter 63.136.128.0/17 longer accept;
                route-filter 209.25.0.0/17 longer accept;
                route-filter 208.157.0.0/17 longer accept;
                route-filter 208.166.128.0/17 longer accept;
                route-filter 67.54.0.0/17 longer accept;
                route-filter 64.41.128.0/17 longer accept;
                route-filter 209.27.128.0/17 longer accept;
                route-filter 206.151.128.0/17 longer accept;
                route-filter 208.167.0.0/17 longer accept;
                route-filter 204.188.0.0/17 longer accept;
                route-filter 206.24.0.0/17 longer accept;
                route-filter 208.131.0.0/17 longer accept;
                route-filter 216.136.128.0/17 longer accept;
                route-filter 206.99.128.0/17 longer accept;
                route-filter 204.189.0.0/16 longer accept;
                route-filter 206.79.0.0/16 longer accept;
                route-filter 208.162.0.0/16 longer accept;
                route-filter 207.82.0.0/16 longer accept;
                route-filter 207.149.0.0/16 longer accept;
                route-filter 209.176.0.0/16 longer accept;
                route-filter 206.142.0.0/16 longer accept;
                route-filter 205.136.0.0/16 longer accept;
                route-filter 64.14.0.0/16 longer accept;
                route-filter 207.124.0.0/16 longer accept;
                route-filter 207.3.0.0/16 longer accept;
                route-filter 209.1.0.0/16 longer accept;
                route-filter 208.156.0.0/16 longer accept;
                route-filter 206.129.0.0/16 longer accept;
                route-filter 208.139.0.0/16 longer accept;
                route-filter 209.223.0.0/16 longer accept;
                route-filter 209.144.0.0/16 longer accept;
                route-filter 209.185.0.0/16 longer accept;
                route-filter 206.98.0.0/16 longer accept;
                route-filter 206.150.0.0/16 longer accept;
                route-filter 206.152.0.0/16 longer accept;
                route-filter 209.67.0.0/16 longer accept;
                route-filter 206.155.0.0/16 longer accept;
                route-filter 207.51.0.0/16 longer accept;
                route-filter 208.130.0.0/16 longer accept;
                route-filter 63.137.0.0/16 longer accept;
                route-filter 206.25.0.0/16 longer accept;
                route-filter 208.133.0.0/16 longer accept;
                route-filter 165.193.0.0/16 longer accept;
                route-filter 167.215.0.0/16 longer accept;
                route-filter 208.172.0.0/16 longer accept;
                route-filter 205.216.0.0/16 longer accept;
                route-filter 208.174.0.0/16 longer accept;
                route-filter 207.48.0.0/15 longer accept;
                route-filter 208.160.0.0/15 longer accept;
                route-filter 63.128.0.0/15 longer accept;
                route-filter 208.164.0.0/15 longer accept;
                route-filter 204.70.0.0/15 longer accept;
                route-filter 206.156.0.0/15 longer accept;
                route-filter 208.158.0.0/15 longer accept;
                route-filter 208.170.0.0/15 longer accept;
                route-filter 208.134.0.0/15 longer accept;
                route-filter 206.30.0.0/15 longer accept;
                route-filter 208.136.0.0/15 longer accept;
                route-filter 66.100.0.0/15 longer accept;
                route-filter 208.128.0.0/15 longer accept;
                route-filter 205.218.0.0/15 longer accept;
                route-filter 207.0.0.0/15 longer accept;
                route-filter 205.138.0.0/15 longer accept;
                route-filter 206.26.0.0/15 longer accept;
                route-filter 206.100.0.0/14 longer accept;
                route-filter 216.88.0.0/14 longer accept;
                route-filter 64.240.0.0/14 longer accept;
                route-filter 208.140.0.0/14 longer accept;
                route-filter 216.32.0.0/14 longer accept;
                route-filter 208.152.0.0/14 longer accept;
                route-filter 208.144.0.0/13 longer accept;
            }
        }
        term reject-others {
            then reject;
        }
    }
    policy-statement export-customer-routes-glbl {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-customer;
            then {
                community delete comm-wild;
                accept;
            }
        }
        term comm-peer {
            from community comm-peer;
            then reject;
        }
        then {
            community delete comm-wild;
            next policy;
        }
    }
    policy-statement export-customer-routes-glbl-comm {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-customer;
            then accept;
        }
        term comm-peer {
            from community comm-peer;
            then reject;
        }
        then next policy;
    }
    policy-statement export-full-routes-comm {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-customer;
            then accept;
        }
        term comm-peer {
            from community comm-peer;
            then accept;
        }
        then next policy;
    }
    policy-statement set-peer-local-pref-100-RNA {
        then {
            local-preference 100;
            community set comm-RNA-peer;
        }
    }
    policy-statement set-peer-local-pref-RNA {
        then {
            metric 128;
            local-preference 80;
            community set comm-RNA-peer;
        }
    }
    policy-statement per-flow-load-balancing {
        term 1 {
            from {
                route-filter 208.174.15.0/24 orlonger;
            }
        }
        then {
            load-balance per-packet;
        }
    }
    policy-statement default-originate {
        term 1 {
            from {
                route-filter 0.0.0.0/0 exact accept;
            }
        }
        term 2 {
            then next policy;
        }
    }
    policy-statement export-backbone-routes {
        term one {
            from {
                route-filter 199.242.24.0/23 exact;
                route-filter 206.220.224.0/22 exact;
                route-filter 209.27.56.0/22 exact;
                route-filter 206.128.220.0/22 exact;
                route-filter 204.188.128.0/21 exact;
                route-filter 207.189.88.0/21 exact;
                route-filter 206.154.56.0/21 exact;
                route-filter 63.136.120.0/21 exact;
                route-filter 206.99.112.0/21 exact;
                route-filter 206.97.16.0/21 exact;
                route-filter 208.138.160.0/21 exact;
                route-filter 208.157.152.0/21 exact;
                route-filter 199.242.16.0/21 exact;
                route-filter 206.128.208.0/21 exact;
                route-filter 204.194.8.0/21 exact;
                route-filter 209.143.192.0/20 exact;
                route-filter 216.118.192.0/20 exact;
                route-filter 206.97.0.0/20 exact;
                route-filter 66.128.224.0/20 exact;
                route-filter 66.128.64.0/20 exact;
                route-filter 206.28.160.0/20 exact;
                route-filter 216.144.64.0/20 exact;
                route-filter 206.151.32.0/20 exact;
                route-filter 216.182.160.0/20 exact;
                route-filter 216.182.64.0/20 exact;
                route-filter 216.19.160.0/20 exact;
                route-filter 216.219.64.0/20 exact;
                route-filter 216.219.96.0/20 exact;
                route-filter 206.132.32.0/20 exact;
                route-filter 216.224.96.0/20 exact;
                route-filter 205.140.160.0/20 exact;
                route-filter 216.227.224.0/20 exact;
                route-filter 206.154.32.0/20 exact;
                route-filter 216.39.32.0/20 exact;
                route-filter 216.39.96.0/20 exact;
                route-filter 216.48.64.0/20 exact;
                route-filter 216.69.224.0/20 exact;
                route-filter 64.15.192.0/20 exact;
                route-filter 216.227.192.0/20 exact;
                route-filter 216.14.160.0/20 exact;
                route-filter 64.209.128.0/20 exact;
                route-filter 64.209.192.0/20 exact;
                route-filter 206.29.128.0/20 exact;
                route-filter 64.253.192.0/20 exact;
                route-filter 206.132.144.0/20 exact;
                route-filter 64.27.160.0/20 exact;
                route-filter 64.56.192.0/20 exact;
                route-filter 64.70.96.0/20 exact;
                route-filter 64.79.160.0/20 exact;
                route-filter 208.138.0.0/20 exact;
                route-filter 208.138.176.0/20 exact;
                route-filter 64.89.32.0/20 exact;
                route-filter 64.92.160.0/20 exact;
                route-filter 208.157.128.0/20 exact;
                route-filter 207.189.64.0/20 exact;
                route-filter 206.99.96.0/20 exact;
                route-filter 209.27.32.0/20 exact;
                route-filter 204.188.144.0/20 exact;
                route-filter 63.136.96.0/20 exact;
                route-filter 208.167.208.0/20 exact;
                route-filter 66.119.32.0/20 exact;
                route-filter 208.48.208.0/20 exact;
                route-filter 206.97.32.0/19 exact;
                route-filter 64.209.224.0/19 exact;
                route-filter 199.217.64.0/19 exact;
                route-filter 213.174.192.0/19 exact;
                route-filter 166.63.128.0/19 exact;
                route-filter 206.28.128.0/19 exact;
                route-filter 206.153.64.0/19 exact;
                route-filter 207.50.160.0/19 exact;
                route-filter 205.140.128.0/19 exact;
                route-filter 206.132.0.0/19 exact;
                route-filter 64.209.160.0/19 exact;
                route-filter 208.168.192.0/19 exact;
                route-filter 209.27.0.0/19 exact;
                route-filter 64.15.224.0/19 exact;
                route-filter 64.15.160.0/19 exact;
                route-filter 216.64.192.0/19 exact;
                route-filter 206.40.64.0/19 exact;
                route-filter 206.154.0.0/19 exact;
                route-filter 208.169.96.0/19 exact;
                route-filter 208.175.192.0/19 exact;
                route-filter 206.99.64.0/19 exact;
                route-filter 208.163.0.0/19 exact;
                route-filter 212.124.224.0/19 exact;
                route-filter 208.138.128.0/19 exact;
                route-filter 207.2.64.0/19 exact;
                route-filter 208.166.0.0/19 exact;
                route-filter 206.24.160.0/19 exact;
                route-filter 208.175.160.0/19 exact;
                route-filter 66.37.192.0/19 exact;
                route-filter 206.151.0.0/19 exact;
                route-filter 216.39.64.0/19 exact;
                route-filter 205.217.192.0/19 exact;
                route-filter 216.19.128.0/19 exact;
                route-filter 216.182.192.0/19 exact;
                route-filter 206.128.224.0/19 exact;
                route-filter 216.177.64.0/19 exact;
                route-filter 216.109.64.0/19 exact;
                route-filter 216.104.224.0/19 exact;
                route-filter 209.225.64.0/19 exact;
                route-filter 209.143.224.0/19 exact;
                route-filter 204.188.160.0/19 exact;
                route-filter 206.96.96.0/19 exact;
                route-filter 209.16.192.0/19 exact;
                route-filter 82.118.64.0/19 exact;
                route-filter 206.128.0.0/19 exact;
                route-filter 206.40.128.0/19 exact;
                route-filter 208.132.64.0/19 exact;
                route-filter 64.210.160.0/19 exact;
                route-filter 64.211.224.0/19 exact;
                route-filter 64.22.128.0/19 exact;
                route-filter 64.28.64.0/19 exact;
                route-filter 64.39.32.0/19 exact;
                route-filter 64.58.64.0/19 exact;
                route-filter 64.68.64.0/19 exact;
                route-filter 64.70.64.0/19 exact;
                route-filter 63.136.64.0/19 exact;
                route-filter 208.163.64.0/18 exact;
                route-filter 208.173.128.0/18 exact;
                route-filter 205.140.192.0/18 exact;
                route-filter 206.97.64.0/18 exact;
                route-filter 208.169.0.0/18 exact;
                route-filter 207.50.192.0/18 exact;
                route-filter 209.44.0.0/18 exact;
                route-filter 206.24.192.0/18 exact;
                route-filter 206.99.0.0/18 exact;
                route-filter 208.168.128.0/18 exact;
                route-filter 206.128.128.0/18 exact;
                route-filter 206.151.64.0/18 exact;
                route-filter 206.153.0.0/18 exact;
                route-filter 208.132.0.0/18 exact;
                route-filter 208.48.64.0/18 exact;
                route-filter 208.50.128.0/18 exact;
                route-filter 209.202.128.0/18 exact;
                route-filter 209.225.0.0/18 exact;
                route-filter 208.138.192.0/18 exact;
                route-filter 208.138.64.0/18 exact;
                route-filter 208.157.192.0/18 exact;
                route-filter 205.217.128.0/18 exact;
                route-filter 207.2.0.0/18 exact;
                route-filter 216.74.128.0/18 exact;
                route-filter 66.35.192.0/18 exact;
                route-filter 64.210.192.0/18 exact;
                route-filter 64.85.64.0/18 exact;
                route-filter 206.28.192.0/18 exact;
                route-filter 209.27.64.0/18 exact;
                route-filter 208.167.128.0/18 exact;
                route-filter 64.37.192.0/18 exact;
                route-filter 206.96.0.0/18 exact;
                route-filter 206.29.192.0/18 exact;
                route-filter 206.154.64.0/18 exact;
                route-filter 64.70.0.0/18 exact;
                route-filter 208.131.192.0/18 exact;
                route-filter 63.136.0.0/18 exact;
                route-filter 64.75.0.0/18 exact;
                route-filter 208.166.64.0/18 exact;
                route-filter 209.83.128.0/17 exact;
                route-filter 207.50.0.0/17 exact;
                route-filter 167.216.128.0/17 exact;
                route-filter 146.135.0.0/17 exact;
                route-filter 205.217.0.0/17 exact;
                route-filter 208.168.0.0/17 exact;
                route-filter 206.28.0.0/17 exact;
                route-filter 206.29.0.0/17 exact;
                route-filter 208.169.128.0/17 exact;
                route-filter 206.154.128.0/17 exact;
                route-filter 166.49.0.0/17 exact;
                route-filter 207.2.128.0/17 exact;
                route-filter 206.97.128.0/17 exact;
                route-filter 205.140.0.0/17 exact;
                route-filter 206.153.128.0/17 exact;
                route-filter 208.132.128.0/17 exact;
                route-filter 208.163.128.0/17 exact;
                route-filter 206.96.128.0/17 exact;
                route-filter 208.173.0.0/17 exact;
                route-filter 209.102.0.0/17 exact;
                route-filter 208.175.0.0/17 exact;
                route-filter 63.136.128.0/17 exact;
                route-filter 209.25.0.0/17 exact;
                route-filter 208.157.0.0/17 exact;
                route-filter 208.166.128.0/17 exact;
                route-filter 67.54.0.0/17 exact;
                route-filter 64.41.128.0/17 exact;
                route-filter 209.27.128.0/17 exact;
                route-filter 206.151.128.0/17 exact;
                route-filter 208.167.0.0/17 exact;
                route-filter 204.188.0.0/17 exact;
                route-filter 206.24.0.0/17 exact;
                route-filter 208.131.0.0/17 exact;
                route-filter 216.136.128.0/17 exact;
                route-filter 206.99.128.0/17 exact;
                route-filter 204.189.0.0/16 exact;
                route-filter 206.79.0.0/16 exact;
                route-filter 208.162.0.0/16 exact;
                route-filter 207.82.0.0/16 exact;
                route-filter 207.149.0.0/16 exact;
                route-filter 209.176.0.0/16 exact;
                route-filter 206.142.0.0/16 exact;
                route-filter 205.136.0.0/16 exact;
                route-filter 64.14.0.0/16 exact;
                route-filter 207.124.0.0/16 exact;
                route-filter 207.3.0.0/16 exact;
                route-filter 209.1.0.0/16 exact;
                route-filter 208.156.0.0/16 exact;
                route-filter 206.129.0.0/16 exact;
                route-filter 208.139.0.0/16 exact;
                route-filter 209.223.0.0/16 exact;
                route-filter 209.144.0.0/16 exact;
                route-filter 209.185.0.0/16 exact;
                route-filter 206.98.0.0/16 exact;
                route-filter 206.150.0.0/16 exact;
                route-filter 206.152.0.0/16 exact;
                route-filter 209.67.0.0/16 exact;
                route-filter 206.155.0.0/16 exact;
                route-filter 207.51.0.0/16 exact;
                route-filter 208.130.0.0/16 exact;
                route-filter 63.137.0.0/16 exact;
                route-filter 206.25.0.0/16 exact;
                route-filter 208.133.0.0/16 exact;
                route-filter 165.193.0.0/16 exact;
                route-filter 167.215.0.0/16 exact;
                route-filter 208.172.0.0/16 exact;
                route-filter 205.216.0.0/16 exact;
                route-filter 208.174.0.0/16 exact;
                route-filter 207.48.0.0/15 exact;
                route-filter 208.160.0.0/15 exact;
                route-filter 63.128.0.0/15 exact;
                route-filter 208.164.0.0/15 exact;
                route-filter 204.70.0.0/15 exact;
                route-filter 206.156.0.0/15 exact;
                route-filter 208.158.0.0/15 exact;
                route-filter 208.170.0.0/15 exact;
                route-filter 208.134.0.0/15 exact;
                route-filter 206.30.0.0/15 exact;
                route-filter 208.136.0.0/15 exact;
                route-filter 66.100.0.0/15 exact;
                route-filter 208.128.0.0/15 exact;
                route-filter 205.218.0.0/15 exact;
                route-filter 207.0.0.0/15 exact;
                route-filter 205.138.0.0/15 exact;
                route-filter 206.26.0.0/15 exact;
                route-filter 206.100.0.0/14 exact;
                route-filter 216.88.0.0/14 exact;
                route-filter 64.240.0.0/14 exact;
                route-filter 208.140.0.0/14 exact;
                route-filter 216.32.0.0/14 exact;
                route-filter 208.152.0.0/14 exact;
                route-filter 208.144.0.0/13 exact;
            }
            then accept;
        }
        term two {
            then reject;
        }
    }
    policy-statement deny-all {
        then reject;
    }
    policy-statement set-customer-non-transit-local-pref-US {
        term delete-community {
            then {
                community delete delete-cw-comm;
                next term;
            }
        }
        term comm-70 {
            from community comm-70;
            then {
                local-preference 70;
                community add comm-US-customer;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-80 {
            from community comm-80;
            then {
                local-preference 80;
                community add comm-US-customer;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-90 {
            from community comm-90;
            then {
                local-preference 90;
                community add comm-US-customer;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-100 {
            then {
                local-preference 100;
                community add comm-US-customer;
                community add comm-no-peer;
                next policy;
            }
        }
    }
    policy-statement ddostracking2 {
        from community dos-victim2;
        then destination-class dos-victim2;
    }
    policy-statement ddostracking3 {
        from community dos-victim3;
        then destination-class dos-victim3;
    }
    policy-statement set-customer-private-ASN-non-transit-local-pref {
        term delete-community {
            then {
                community delete delete-cw-comm;
                next term;
            }
        }
        term comm-70 {
            from community comm-70;
            then {
                local-preference 70;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-80 {
            from community comm-80;
            then {
                local-preference 80;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-90 {
            from community comm-90;
            then {
                local-preference 90;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-100 {
            then {
                local-preference 100;
                community add comm-no-peer;
                next policy;
            }
        }
    }
    policy-statement set-customer-private-ASN-local-pref {
        term delete-community {
            then {
                community delete delete-cw-comm;
                next term;
            }
        }
        term comm-70 {
            from community comm-70;
            then {
                local-preference 70;
                next policy;
            }
        }
        term comm-80 {
            from community comm-80;
            then {
                local-preference 80;
                next policy;
            }
        }
        term comm-90 {
            from community comm-90;
            then {
                local-preference 90;
                next policy;
            }
        }
        term comm-100 {
            then {
                local-preference 100;
                next policy;
            }
        }
    }
    policy-statement export-customer-routes-GB {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-GB-customer;
            then {
                community delete comm-wild;
                accept;
            }
        }
        term comm-peer {
            from community [ comm-peer comm-customer ];
            then reject;
        }
        then {
            community delete comm-wild;
            next policy;
        }
    }
    policy-statement export-customer-routes-GB-comm {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-GB-customer;
            then accept;
        }
        term comm-peer {
            from community [ comm-peer comm-customer ];
            then reject;
        }
        then next policy;
    }
    policy-statement set-customer-local-pref-GB {
        term delete-community {
            then {
                community delete delete-cw-comm;
                next term;
            }
        }
        term comm-70 {
            from community comm-70;
            then {
                local-preference 70;
                community add comm-GB-customer;
                next policy;
            }
        }
        term comm-80 {
            from community comm-80;
            then {
                local-preference 80;
                community add comm-GB-customer;
                next policy;
            }
        }
        term comm-90 {
            from community comm-90;
            then {
                local-preference 90;
                community add comm-GB-customer;
                next policy;
            }
        }
        term comm-100 {
            then {
                local-preference 100;
                community add comm-GB-customer;
                next policy;
            }
        }
    }
    policy-statement export-customer-routes-REU {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-REU-customer;
            then {
                community delete comm-wild;
                accept;
            }
        }
        term comm-peer {
            from community [ comm-peer comm-customer ];
            then reject;
        }
        then {
            community delete comm-wild;
            next policy;
        }
    }
    policy-statement export-customer-routes-REU-comm {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-customer {
            from community comm-REU-customer;
            then accept;
        }
        term comm-peer {
            from community [ comm-peer comm-customer ];
            then reject;
        }
        then next policy;
    }
    policy-statement set-peer-local-pref-100-REU {
        then {
            local-preference 100;
            community set comm-REU-peer;
        }
    }
    policy-statement set-peer-local-pref-REU {
        then {
            metric 128;
            local-preference 80;
            community set comm-REU-peer;
        }
    }
    policy-statement set-customer-non-transit-local-pref-GB {
        term delete-community {
            then {
                community delete delete-cw-comm;
                next term;
            }
        }
        term comm-70 {
            from community comm-70;
            then {
                local-preference 70;
                community add comm-GB-customer;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-80 {
            from community comm-80;
            then {
                local-preference 80;
                community add comm-GB-customer;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-90 {
            from community comm-90;
            then {
                local-preference 90;
                community add comm-GB-customer;
                community add comm-no-peer;
                next policy;
            }
        }
        term comm-100 {
            then {
                local-preference 100;
                community add comm-GB-customer;
                community add comm-no-peer;
                next policy;
            }
        }
    }
    policy-statement announce-local {
        term reject-default {
            from {
                route-filter 0.0.0.0/0 exact;
            }
            then reject;
        }
        term announce-local {
            from {
                route-filter 213.174.192.0/25 exact;
                route-filter 213.174.192.208/29 exact;
                route-filter 213.174.192.216/29 exact;
                route-filter 213.174.193.0/28 exact;
                route-filter 213.174.195.0/26 exact;
                route-filter 213.174.195.112/28 exact;
                route-filter 213.174.195.128/28 exact;
                route-filter 213.174.195.176/28 exact;
                route-filter 213.174.195.224/28 exact;
                route-filter 213.174.196.0/28 exact;
                route-filter 213.174.196.16/28 exact;
                route-filter 213.174.196.32/28 exact;
                route-filter 213.174.196.64/28 exact;
                route-filter 213.174.196.96/28 exact;
                route-filter 213.174.196.160/28 exact;
                route-filter 213.174.196.176/28 exact;
                route-filter 213.174.196.224/29 exact;
                route-filter 213.174.196.240/28 exact;
                route-filter 213.174.198.0/27 exact;
                route-filter 213.174.198.32/27 exact;
                route-filter 213.174.198.64/27 exact;
                route-filter 213.174.198.192/29 exact;
                route-filter 213.174.198.208/28 exact;
                route-filter 213.174.198.240/29 exact;
                route-filter 213.174.199.0/27 exact;
                route-filter 213.174.199.64/27 exact;
                route-filter 213.174.199.96/28 exact;
                route-filter 213.174.199.128/29 exact;
                route-filter 213.174.199.144/29 exact;
                route-filter 213.174.199.160/27 exact;
                route-filter 213.174.200.0/28 exact;
                route-filter 213.174.200.80/28 exact;
                route-filter 213.174.200.128/29 exact;
                route-filter 213.174.200.144/28 exact;
                route-filter 213.174.200.192/27 exact;
                route-filter 213.174.201.96/28 exact;
                route-filter 213.174.201.128/25 exact;
                route-filter 213.174.202.160/27 exact;
                route-filter 213.174.205.0/24 exact;
                route-filter 213.174.207.116/32 exact;
                route-filter 213.174.198.128/27 exact;
                route-filter 213.174.199.224/27 exact;
                route-filter 213.174.195.64/29 exact;
                route-filter 213.174.202.128/27 exact;
                route-filter 213.174.197.176/28 exact;
                route-filter 213.174.200.32/28 exact;
                route-filter 213.174.202.0/25 exact;
                route-filter 212.124.244.0/26 exact;
                route-filter 165.193.172.72/30 exact;
                route-filter 213.174.195.72/29 exact;
                route-filter 213.174.192.144/28 exact;
                route-filter 213.174.200.224/28 exact;
                route-filter 213.174.203.224/27 exact;
                route-filter 213.174.196.232/29 exact;
                route-filter 206.24.172.80/30 exact;
                route-filter 213.174.197.240/28 exact;
                route-filter 213.174.197.0/25 exact;
                route-filter 212.117.224.192/26 exact;
                route-filter 213.174.198.252/32 exact;
                route-filter 213.174.198.253/32 exact;
                route-filter 212.124.227.48/28 exact;
                route-filter 212.124.251.160/28 exact;
                route-filter 82.118.66.0/24 exact;
                route-filter 82.118.67.0/24 exact;
                route-filter 82.118.65.112/28 exact;
                route-filter 213.174.199.48/29 exact;
                route-filter 82.118.65.192/26 exact;
                route-filter 82.118.71.0/27 exact;
                route-filter 82.118.95.96/27 exact;
                route-filter 212.124.251.176/28 exact;
                route-filter 213.174.200.16/28 exact;
                route-filter 212.117.224.0/26 exact;
                route-filter 212.124.226.88/29 exact;
                route-filter 82.118.71.64/26 exact;
                route-filter 213.174.198.192/28 exact;
                route-filter 206.24.172.144/28 exact;
                route-filter 82.118.70.0/24 exact;
                route-filter 82.118.65.104/29 exact;
                route-filter 82.118.65.96/29 exact;
                route-filter 212.124.252.112/28 exact;
                route-filter 212.124.253.32/28 exact;
                route-filter 206.24.172.192/26 exact;
                route-filter 206.24.172.128/30 exact;
                route-filter 206.24.172.132/30 exact;
                route-filter 206.24.172.136/30 exact;
                route-filter 212.124.227.160/27 exact;
                route-filter 212.124.239.192/27 exact;
                route-filter 212.117.224.112/28 exact;
                route-filter 212.124.240.0/28 exact;
                route-filter 216.219.74.0/23 exact;
                route-filter 212.124.240.176/28 exact;
                route-filter 212.124.236.32/29 exact;
                route-filter 212.124.224.64/28 exact;
                route-filter 212.124.241.208/28 exact;
                route-filter 213.174.193.128/27 exact;
                route-filter 212.124.241.240/28 exact;
                route-filter 213.174.192.0/19 exact;
            }
            then {
                next-hop self;
                accept;
            }
        }
        term backup-static {
            from {
                route-filter 213.174.195.80/28 exact;
                route-filter 213.174.196.128/28 exact;
                route-filter 213.174.196.192/28 exact;
                route-filter 213.174.197.208/28 exact;
                route-filter 213.174.200.96/28 exact;
                route-filter 213.174.201.0/28 exact;
                route-filter 213.174.201.32/32 exact;
                route-filter 213.174.201.64/32 exact;
                route-filter 213.174.202.192/27 exact;
                route-filter 213.174.202.224/28 exact;
                route-filter 213.174.197.128/27 exact;
                route-filter 192.168.0.1/32 exact;
            }
            then {
                local-preference 90;
                next-hop self;
                accept;
            }
        }
        from {
            route-filter 213.174.203.192/28 exact;
            route-filter 213.174.198.184/29 exact;
            route-filter 213.174.198.160/28 exact;
            route-filter 213.174.196.112/28 exact;
            route-filter 213.174.198.176/29 exact;
        }
    }
    policy-statement deny-default {
        term one {
            from {
                route-filter 0.0.0.0/0 exact reject;
            }
        }
    }
    policy-statement isis-tag {
        term one {
            from {
                protocol isis;
                tag 120;
            }
            then accept;
        }
        term two {
            then reject;
        }
    }
    policy-statement redistribute-direct {
        term one {
            from protocol direct;
            then accept;
        }
        then reject;
    }
    policy-statement AS65530-DDoS {
        term accept-DDoS {
            from {
                community dos-victim1;
                route-filter 165.193.172.96/27 orlonger;
            }
            then {
                local-preference 100;
                community delete delete-cw-comm;
                next-hop 206.24.194.51;
                accept;
            }
        }
        term next-policy {
            then next policy;
        }
    }
    policy-statement AS65530 {
        term accept-prefix {
            from {
                route-filter 165.193.172.96/27 exact accept;
            }
            then accept;
        }
        term reject-rest {
            then reject;
        }
    }
    policy-statement set-comm-shasta {
        term cntx04 {
            from as-path shasta-cntx04;
            then {
                community set comm-shasta-cntx04;
                next policy;
            }
        }
        term shasta-cntx11 {
            from as-path shasta-cntx11;
            then {
                community set comm-shasta-cntx11;
                next policy;
            }
        }
        term shasta-cntx12 {
            from as-path shasta-cntx12;
            then {
                community set comm-shasta-cntx12;
                next policy;
            }
        }
        term shasta-cntx13 {
            from as-path shasta-cntx13;
            then {
                community set comm-shasta-cntx13;
                next policy;
            }
        }
        term shasta-cntx14 {
            from as-path shasta-cntx14;
            then {
                community set comm-shasta-cntx14;
                next policy;
            }
        }
        term shasta-cntx32 {
            from as-path shasta-cntx32;
            then {
                community set comm-shasta-cntx32;
                next policy;
            }
        }
    }
    policy-statement prefix-shasta {
        term 10 {
            from {
                route-filter 82.118.93.0/24 orlonger;
                route-filter 212.124.236.48/28 exact;
            }
            then {
                damping none;
                accept;
            }
        }
        then reject;
    }
    policy-statement block-general-ldp-routes {
        term one {
            from {
                route-filter 208.174.15.0/24 orlonger;
                route-filter 209.83.159.0/24 orlonger;
            }
            then accept;
        }
        term two {
            then reject;
        }
    }
    policy-statement export-sec-loopback {
        term one {
            from {
                route-filter 208.174.15.156/32 exact;
            }
            then accept;
        }
        term two {
            then reject;
        }
    }
    policy-statement DDoS {
        term accept-DDoS {
            from community dos-victim1;
            then {
                local-preference 100;
                community delete delete-cw-comm;
                next-hop 206.24.194.51;
                accept;
            }
        }
        term next-policy {
            then next policy;
        }
    }
    policy-statement export-peer-routes {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-peer {
            from community comm-peer;
            then {
                community delete comm-wild;
                accept;
            }
        }
        term comm-customer {
            from community comm-customer;
            then reject;
        }
        then reject;
    }
    policy-statement export-peer-routes-comm {
        term AS4293 {
            from {
                as-path as4293-routes;
                policy find-specifics;
            }
            then reject;
        }
        term comm-peer {
            from community comm-peer;
            then accept;
        }
        term comm-customer {
            from community comm-customer;
            then reject;
        }
        then reject;
    }
    community AS2828-0 members 3561:30030;
    community AS2828-1 members 3561:30031;
    community AS2828-2 members 3561:30032;
    community AS2828-3 members 3561:30033;
    community AS2828-9 members 3561:30039;
    community comm-70 members 3561:70;
    community comm-80 members 3561:80;
    community comm-90 members 3561:90;
    community comm-GB-customer members 3561:12826;
    community comm-REU-customer members 3561:12...;
    community comm-REU-peer members 3561:22000;
    community comm-RNA-customer members 3561:11...;
    community comm-RNA-peer members 3561:21000;
    community comm-US-customer members 3561:11840;
    community comm-announce-only members 3561:30..9;
    community comm-customer members 3561:1....;
    community comm-no-export members no-export;
    community comm-no-peer members 3561:30000;
    community comm-peer members 3561:2....;
    community comm-shasta-cntx04 members 3561:65090;
    community comm-shasta-cntx11 members 3561:65091;
    community comm-shasta-cntx12 members 3561:65092;
    community comm-shasta-cntx13 members 3561:65093;
    community comm-shasta-cntx14 members 3561:65094;
    community comm-shasta-cntx32 members 3561:65095;
    community comm-wild members *:*;
    community delete-cw-comm members [ 3561:1.* 3561:2.* 3561:700 3561:701 ];
    community dos-victim1 members 3561:666;
    community dos-victim2 members 3561:700;
    community dos-victim3 members 3561:701;
    community guard-DDoS members 3561:6157;
    as-path private-as ".* 64512-65535+ .*";
    as-path swamp ".*(174|209|701|702|1239|1299|1668|2828|2914|3257|3300|3320|3356|3549|5511|6461|6762|7018|7132|8220).*";
    as-path as4293-routes ".*(4293|64512-65535).*";
    as-path shasta-cntx04 65090;
    as-path shasta-cntx11 65091;
    as-path shasta-cntx12 65092;
    as-path shasta-cntx13 65093;
    as-path shasta-cntx14 65094;
    as-path shasta-cntx32 65095;
    damping cisco {
        reuse 1500;
        suppress 4001;
    }
    damping none {
        disable;
    }
}
firewall {
    policer limit-ssh {
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-snmp {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-udp {
        if-exceeding {
            bandwidth-limit 2m;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-ntp {
        if-exceeding {
            bandwidth-limit 500k;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-syn {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-traceroutes {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-ddos {
        if-exceeding {
            bandwidth-limit 2m;
            burst-size-limit 15k;
        }
        then discard;
    }
    policer limit-icmp {
        if-exceeding {
            bandwidth-limit 20m;
            burst-size-limit 2m;
        }
        then discard;
    }
    policer limit-management {
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 1m;
        }
        then discard;
    }
    filter deny-non-routable {
        term block_nonroutable {
            from {
                source-prefix-list {
                    non-routable-list;
                }
            }
            then {
                count non-routable-packets;
                discard;
            }
        }
        term first {
            then {
                count cflowd-stat;
                sample;
                next term;
            }
        }
        term last {
            then accept;
        }
    }
    filter ACL10 {
        term NTP_accept {
            from {
                source-prefix-list {
                    ntp-list;
                }
                protocol udp;
                port ntp;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term BGP_SYN_accept {
            from {
                source-prefix-list {
                    bgp-list;
                }
                protocol tcp;
                port bgp;
                tcp-initial;
            }
            then {
                policer limit-syn;
                accept;
            }
        }
        term BGP_accept {
            from {
                source-prefix-list {
                    bgp-list;
                }
                protocol tcp;
                port bgp;
            }
            then accept;
        }
        term SSH_accept {
            from {
                source-prefix-list {
                    core-list;
                    host-list;
                }
                protocol tcp;
                port ssh;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term SSH_deny {
            from {
                protocol tcp;
                port ssh;
            }
            then {
                count SSH_deny;
                syslog;
                discard;
            }
        }
        term SNMP_accept {
            from {
                source-prefix-list {
                    snmp-list;
                }
                protocol udp;
                port snmp;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term MSDP_accept {
            from {
                source-prefix-list {
                    msdp-list;
                }
                protocol tcp;
                port [ 639 679 ];
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term LDP_accept {
            from {
                source-prefix-list {
                    ldp-list;
                }
                protocol [ tcp udp ];
                port ldp;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term DNS_accept {
            from {
                source-prefix-list {
                    dns-list;
                }
                protocol udp;
                port 53;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term RADIUS_accept {
            from {
                source-prefix-list {
                    radius-list;
                }
                protocol [ udp tcp ];
                source-port radius;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term IGMP_accept {
            from {
                destination-address {
                    224.0.0.0/24;
                }
                protocol igmp;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term VRRP_accept {
            from {
                destination-address {
                    224.0.0.18/32;
                }
                protocol vrrp;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term RIP_accept {
            from {
                destination-address {
                    224.0.0.9/32;
                }
                protocol udp;
                port 520;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term OSPF_accept {
            from {
                protocol ospf;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term PIM {
            from {
                protocol pim;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term RSVP {
            from {
                protocol rsvp;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term no-ICMP-source-quench {
            from {
                protocol icmp;
                icmp-type source-quench;
            }
            then {
                discard;
            }
        }
        term ICMP {
            from {
                protocol icmp;
            }
            then {
                policer limit-icmp;
                accept;
            }
        }
        term traceroutes {
            from {
                protocol udp;
                destination-port 33434-33523;
            }
            then {
                policer limit-management;
                accept;
            }
        }
        term everything-else {
            then {
                count deny_everything;
                syslog;
                discard;
            }
        }
        term TELNET_deny {
            from {
                protocol tcp;
                port telnet;
            }
            then {
                count TELNET_deny;
                syslog;
                discard;
            }
        }
        term LDP_need_to_fix {
            from {
                protocol [ tcp udp ];
                port ldp;
            }
            then {
                policer limit-management;
                count LDP_bogus;
                syslog;
                accept;
            }
        }
    }
    filter IDS-ZYNAPCOLO-TO-NET-ANTI-SPOOF {
        term Permit-Established {
            from {
                source-address {
                    213.174.199.208/29;
                }
                tcp-established;
            }
            then {
                count tcp-established;
                accept;
            }
        }
        term Permit-112 {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    224.0.0.0/24;
                }
                protocol 112;
            }
            then {
                count Multi;
                accept;
            }
        }
        term Permit-563x {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    62.55.0.0/16;
                    80.177.32.8/29;
                    212.124.224.56/29;
                }
                protocol [ udp tcp ];
                port 5631-5632;
            }
            then {
                count 563x;
                accept;
            }
        }
        term Permit-WWW {
            from {
                source-address {
                    213.174.199.208/29;
                }
                protocol tcp;
                port http;
            }
            then {
                count WWW;
                accept;
            }
        }
        term Deny-SNMP {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    213.174.199.208/29;
                }
                protocol [ udp tcp ];
                port [ 161 162 ];
            }
            then {
                count SNMP;
                reject;
            }
        }
        term Permit-Destinations {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    213.174.199.208/29;
                }
            }
            then {
                count Permitted;
                accept;
            }
        }
        term Permit-ntp {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    213.174.195.20/31;
                }
                protocol udp;
                port ntp;
            }
            then {
                count NTP;
                accept;
            }
        }
        term Permit-DNS {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol [ udp tcp ];
                port domain;
            }
            then {
                count DNS;
                accept;
            }
        }
        term Permit-Multi2 {
            from {
                source-address {
                    213.174.199.208/29;
                }
                destination-address {
                    224.0.0.0/24;
                }
                protocol udp;
            }
            then {
                count MULTI2;
                accept;
            }
        }
        term Permit-Ftp {
            from {
                source-address {
                    213.174.199.208/29;
                }
                protocol tcp;
                port ftp-data;
            }
            then {
                count FTP;
                accept;
            }
        }
        term Deny-ALL {
            then {
                count Denied;
                reject;
            }
        }
    }
    filter NET-TO-IDS-ZYNAPCOLO-ANTI-SPOOF {
        term Permit-Established {
            from {
                tcp-established;
            }
            then {
                count tcp-established;
                accept;
            }
        }
        term Permit-563x {
            from {
                source-address {
                    62.55.0.0/16;
                    80.177.32.8/29;
                    212.124.224.56/29;
                }
                destination-address {
                    213.174.199.208/29;
                }
                protocol [ udp tcp ];
                port 5631-5632;
            }
            then {
                count 563x;
                accept;
            }
        }
        term Permit-Various-TCP {
            from {
                destination-address {
                    213.174.199.208/29;
                }
                protocol tcp;
                port [ 389 522 4000 4001 smtp ftp 2000 2001 3389 http 443 ];
            }
            then {
                count various;
                accept;
            }
        }
        term Permit-Various-UDP {
            from {
                destination-address {
                    213.174.199.208/29;
                }
                protocol udp;
                port [ domain ntp 30000-65535 ];
            }
            then {
                count UDP;
                accept;
            }
        }
        term Permit-ICMP {
            from {
                source-address {
                    10.83.251.20/30;
                }
                destination-address {
                    213.174.199.208/29;
                }
                protocol icmp;
            }
            then {
                count ICMP;
                accept;
            }
        }
        term Deny-ALL {
            then {
                count denied;
                reject;
            }
        }
    }
    filter IDS-BANDQCOLO-TO-NET-ANTI-SPOOF {
        term one {
            from {
                tcp-established;
            }
            then accept;
        }
        term two {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    10.83.54.160/29;
                }
                protocol udp;
                port [ snmp snmptrap ];
            }
            then {
                count snmp-snmptrap;
                discard;
            }
        }
        term three {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    10.83.54.160/29;
                }
                protocol tcp;
                port [ 161 162 ];
            }
            then {
                count 161-162;
                discard;
            }
        }
        term four {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol udp;
                port domain;
            }
            then accept;
        }
        term five {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol udp;
                source-port domain;
                destination-port [ 1023-65530 1023-65535 ];
            }
            then accept;
        }
        term six {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    213.174.195.20/31;
                }
                protocol udp;
                port ntp;
            }
            then accept;
        }
        term seven {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    213.174.195.20/31;
                }
                protocol udp;
                source-port ntp;
                destination-port 1023-65535;
            }
            then accept;
        }
        term eight {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    224.0.0.0/24;
                }
                protocol udp;
            }
            then accept;
        }
        term nine {
            from {
                source-address {
                    10.83.54.160/29;
                }
                destination-address {
                    10.83.54.160/29;
                }
            }
            then accept;
        }
        term ten {
            from {
                source-address {
                    10.83.54.160/29;
                }
            }
            then accept;
        }
        term eleven {
            from {
                source-address {
                    213.174.195.64/29;
                }
            }
            then accept;
        }
        term twelve {
            from {
                source-address {
                    213.174.202.128/27;
                }
            }
            then accept;
        }
        term thirteen {
            then {
                discard;
            }
        }
    }
    filter NET-TO-IDS-INEXTCOLO-ANTI-SPOOF {
        term one {
            from {
                tcp-established;
            }
            then accept;
        }
        term two {
            from {
                source-address {
                    213.174.195.20/30;
                }
                destination-address {
                    213.174.199.112/29;
                }
                protocol udp;
                port domain;
            }
            then accept;
        }
        term three {
            from {
                source-address {
                    213.174.195.20/30;
                }
                destination-address {
                    213.174.199.112/29;
                }
                protocol udp;
                source-port domain;
                destination-port 1023-65535;
            }
            then accept;
        }
        term four {
            from {
                source-address {
                    213.174.195.20/31;
                }
                destination-address {
                    213.174.199.112/29;
                }
                port ntp;
            }
            then accept;
        }
        term five {
            from {
                source-address {
                    213.174.195.20/31;
                }
                destination-address {
                    213.174.199.112/29;
                }
                protocol udp;
                source-port ntp;
                destination-port 1023-65535;
            }
            then accept;
        }
        term six {
            from {
                destination-address {
                    213.174.199.112/29;
                }
            }
            then accept;
        }
        term seven {
            from {
                destination-address {
                    213.174.199.224/27;
                }
            }
            then accept;
        }
        term eight {
            from {
                destination-address {
                    213.174.198.128/27;
                }
            }
            then accept;
        }
        term nine {
            then {
                discard;
            }
        }
    }
    filter IDS-INCHCAPECOLO-TO-NET-ANTI-SPOOF {
        term one {
            from {
                tcp-established;
            }
            then {
                count tcp-established;
                accept;
            }
        }
        term two {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    224.0.0.0/24;
                }
                port 112;
            }
            then {
                count 112;
                accept;
            }
        }
        term three {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    213.174.203.0/26;
                }
                protocol udp;
                port [ snmp snmptrap ];
            }
            then {
                count snmp-snmptrap;
                discard;
            }
        }
        term four {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    213.174.203.0/26;
                }
                protocol tcp;
                port [ 161 162 ];
            }
            then {
                count 161-162;
                discard;
            }
        }
        term five {
            from {
                destination-address {
                    213.174.203.0/26;
                }
                protocol udp;
                port domain;
            }
            then {
                count domain;
                accept;
            }
        }
        term six {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol udp;
                source-port domain;
                destination-port 1023-65535;
            }
            then {
                count domain-to-1023-65535;
                accept;
            }
        }
        term seven {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol udp;
                port ntp;
            }
            then {
                count ntp;
                accept;
            }
        }
        term eight {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol udp;
                source-port ntp;
                destination-port 1023-65535;
            }
            then {
                count ntp-to-1023-65535;
                accept;
            }
        }
        term nine {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    224.0.0.0/24;
                }
                protocol udp;
            }
            then {
                count udp;
                accept;
            }
        }
        term ten {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    213.174.203.0/26;
                }
            }
            then {
                count ip;
                accept;
            }
        }
        term eleven {
            from {
                source-address {
                    213.174.203.0/26;
                }
                destination-address {
                    0.0.0.0/0;
                }
            }
            then {
                count ip-any;
                accept;
            }
        }
        term twelve {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    0.0.0.0/0;
                }
            }
            then {
                count discard;
                discard;
            }
        }
    }
    filter ACL109 {
        term one {
            from {
                tcp-established;
            }
            then {
                count tcp-established;
                accept;
            }
        }
        term two {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol esp;
            }
            then {
                count esp;
                accept;
            }
        }
        term three {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol ah;
            }
            then {
                count ah;
                accept;
            }
        }
        term four {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol udp;
                source-port 1531;
                destination-port 500;
            }
            then {
                count isakmp;
                accept;
            }
        }
        term five {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol udp;
                port 10001;
            }
            then {
                count 10001;
                accept;
            }
        }
        term six {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol gre;
            }
            then {
                count gre;
                accept;
            }
        }
        term seven {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol tcp;
                port 1723;
            }
            then {
                count 1723;
                accept;
            }
        }
        term eight {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.194.0/26;
                }
                protocol icmp;
            }
            then {
                count icmp;
                accept;
            }
        }
        term nine {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    0.0.0.0/0;
                }
            }
            then {
                count deny-all;
                discard;
            }
        }
    }
    filter NET-TO-IDS-INCHCAPECOLO-ANTI-SPOOF {
        term one {
            from {
                tcp-established;
            }
            then {
                count tcp-established;
                accept;
            }
        }
        term two {
            from {
                source-address {
                    213.174.195.20/30;
                }
                destination-address {
                    213.174.203.0/26;
                }
                protocol udp;
                port domain;
            }
            then {
                count domain;
                accept;
            }
        }
        term three {
            from {
                source-address {
                    213.174.195.20/30;
                }
                destination-address {
                    213.174.203.0/26;
                }
                protocol udp;
                source-port domain;
                destination-port 1023-65535;
            }
            then {
                count domain-to-1023-65535;
                accept;
            }
        }
        term four {
            from {
                source-address {
                    213.174.195.20/30;
                }
                destination-address {
                    213.174.203.0/26;
                }
                protocol udp;
                port ntp;
            }
            then {
                count ntp;
                accept;
            }
        }
        term five {
            from {
                source-address {
                    213.174.195.20/30;
                }
                destination-address {
                    213.174.203.0/26;
                }
                protocol udp;
                source-port ntp;
                destination-port 1023-65535;
            }
            then {
                count ntp-to-1023-65535;
                accept;
            }
        }
        term six {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    213.174.203.0/26;
                }
            }
            then {
                count ip-any;
                accept;
            }
        }
        term seven {
            from {
                source-address {
                    0.0.0.0/0;
                }
                destination-address {
                    0.0.0.0/0;
                }
            }
            then {
                count discard;
                discard;
            }
        }
    }
    filter IDS-INEXTCOLO-TO-NET-ANTI-SPOOF {
        term one {
            from {
                tcp-established;
            }
            then accept;
        }
        term two {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    224.0.0.0/24;
                }
                protocol 112;
            }
            then accept;
        }
        term three {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.199.112/29;
                }
                protocol udp;
                port [ snmp snmptrap ];
            }
            then {
                discard;
            }
        }
        term four {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.199.112/29;
                }
                protocol tcp;
                port [ 161 162 ];
            }
            then {
                discard;
            }
        }
        term five {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.195.20/30;
                }
                protocol udp;
                port domain;
            }
            then accept;
        }
        term six {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.195.20/30;
                }
                source-port domain;
                destination-port 1023-65535;
            }
            then accept;
        }
        term seven {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.195.20/31;
                }
                protocol udp;
                port ntp;
            }
            then accept;
        }
        term eight {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.195.20/31;
                }
                protocol udp;
                source-port ntp;
                destination-port 1023-65535;
            }
            then accept;
        }
        term nine {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    224.0.0.0/24;
                }
                protocol udp;
            }
            then accept;
        }
        term ten {
            from {
                source-address {
                    213.174.199.112/29;
                }
                destination-address {
                    213.174.199.112/29;
                }
            }
            then accept;
        }
        term eleven {
            from {
                source-address {
                    213.174.199.112/29;
                }
            }
            then accept;
        }
        term twelve {
            from {
                source-address {
                    213.174.199.224/27;
                }
            }
            then accept;
        }
        term thirteen {
            from {
                source-address {
                    213.174.198.128/27;
                }
            }
            then accept;
        }
        term fourteen {
            from {
                destination-address {
                    213.174.199.114/32;
                }
                protocol tcp;
                destination-port 445;
            }
            then {
                discard;
            }
        }
        term fifteen {
            then {
                discard;
            }
        }
    }
    filter uklond6_01_cntx04_egress {
        term udp {
            from {
                protocol udp;
            }
            then {
                count udp;
                accept;
            }
        }
        term icmp {
            from {
                protocol icmp;
            }
            then {
                count icmp;
                accept;
            }
        }
        term protocol_0 {
            from {
                protocol 0;
            }
            then {
                count protocol_0;
                accept;
            }
        }
        term protocol_255 {
            from {
                protocol 255;
            }
            then {
                count protocol_255;
                accept;
            }
        }
        term port_135 {
            from {
                protocol tcp;
                port 135;
            }
            then {
                count port_135;
                accept;
            }
        }
        term port_137 {
            from {
                protocol tcp;
                port 137;
            }
            then {
                count port_137;
                accept;
            }
        }
        term port_139 {
            from {
                protocol tcp;
                port 139;
            }
            then {
                count port_139;
                accept;
            }
        }
        term port_445 {
            from {
                protocol tcp;
                port 445;
            }
            then {
                count port_445;
                accept;
            }
        }
        term port_1433 {
            from {
                protocol tcp;
                port 1433;
            }
            then {
                count port_1433;
                accept;
            }
        }
        term port_1434 {
            from {
                protocol tcp;
                port 1434;
            }
            then {
                count port_1434;
                accept;
            }
        }
        term tcp_syn {
            from {
                tcp-initial;
            }
            then {
                count tcp-initial;
                accept;
            }
        }
        term everything_else {
            then {
                count the_rest;
                accept;
            }
        }
    }
    filter uklond6_01_cntx04_ingress {
        term udp {
            from {
                protocol udp;
            }
            then {
                count udp;
                accept;
            }
        }
        term icmp {
            from {
                protocol icmp;
            }
            then {
                count icmp;
                accept;
            }
        }
        term protocol_0 {
            from {
                protocol 0;
            }
            then {
                count protocol_0;
                accept;
            }
        }
        term protocol_255 {
            from {
                protocol 255;
            }
            then {
                count protocol_255;
                accept;
            }
        }
        term port_135 {
            from {
                protocol tcp;
                port 135;
            }
            then {
                count port_135;
                accept;
            }
        }
        term port_137 {
            from {
                protocol tcp;
                port 137;
            }
            then {
                count port_137;
                accept;
            }
        }
        term port_139 {
            from {
                protocol tcp;
                port 139;
            }
            then {
                count port_139;
                accept;
            }
        }
        term port_445 {
            from {
                protocol tcp;
                port 445;
            }
            then {
                count port_445;
                accept;
            }
        }
        term port_1433 {
            from {
                protocol tcp;
                port 1433;
            }
            then {
                count port_1433;
                accept;
            }
        }
        term port_1434 {
            from {
                protocol tcp;
                port 1434;
            }
            then {
                count port_1434;
                accept;
            }
        }
        term tcp_syn {
            from {
                tcp-initial;
            }
            then {
                count tcp-initial;
                accept;
            }
        }
        term everything_else {
            then {
                count the_rest;
                accept;
            }
        }
    }
    filter cflowd {
        term cflowd-sample {
            then {
                count cflowd-stat;
                sample;
                accept;
            }
        }
    }
}