I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically.
This is what I came up with so far:
edit
delete system services web-management
edit firewall family inet filter local_web_filter
set term block_web from destination-address 127.0.0.1/32
set term block_web from port http
set term block_web from port https
set term block_web then log
set term block_web then reject tcp-reset
set term default-term then accept
set interfaces lo0 unit 0 family inet filter input local_web_filter
set interfaces lo0 unit 0 family inet address 127.0.0.1/32
commit
write memory
I have little experience configuring juniper routers, so any help would be much appreciated.