Do you need configure lo0 unit 0 with
set security zones security-zone trust interface lo0.0
set security zones security-zone host-inbound-interfaces system-services ping
Do you have to do this for any security zone interface to accept ANY kind of service (not just pings but routing protocols too)?