# Hostname: OX-ASC-MX204
# Model: mx204
# Junos: 22.2R3-S2.8
# JUNOS OS Kernel 64-bit  [20230531.cf35cdf_builder_stable_12_222]
# JUNOS OS libs [20230531.cf35cdf_builder_stable_12_222]
# JUNOS OS runtime [20230531.cf35cdf_builder_stable_12_222]
# JUNOS OS time zone information [20230531.cf35cdf_builder_stable_12_222]
# JUNOS network stack and utilities [20230902.110149_builder_junos_222_r3_s2]
# JUNOS libs [20230902.110149_builder_junos_222_r3_s2]
# JUNOS OS libs compat32 [20230531.cf35cdf_builder_stable_12_222]
# JUNOS OS 32-bit compatibility [20230531.cf35cdf_builder_stable_12_222]
# JUNOS libs compat32 [20230902.110149_builder_junos_222_r3_s2]
# JUNOS runtime [20230902.110149_builder_junos_222_r3_s2]
# Junos vmguest package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS sflow mx [20230902.110149_builder_junos_222_r3_s2]
# JUNOS py extensions [20230902.110149_builder_junos_222_r3_s2]
# JUNOS py base [20230902.110149_builder_junos_222_r3_s2]
# JUNOS OS vmguest [20230531.cf35cdf_builder_stable_12_222]
# JUNOS OS crypto [20230531.cf35cdf_builder_stable_12_222]
# JUNOS OS boot-ve files [20230531.cf35cdf_builder_stable_12_222]
# JUNOS na telemetry [22.2R3-S2.8]
# JUNOS Security Intelligence [20230902.110149_builder_junos_222_r3_s2]
# JUNOS mx libs compat32 [20230902.110149_builder_junos_222_r3_s2]
# JUNOS mx runtime [20230902.110149_builder_junos_222_r3_s2]
# JUNOS RPD Telemetry Application [22.2R3-S2.8]
# JUNOS Routing mpls-oam-basic [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Routing mpls-oam-advanced [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Routing lsys [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Routing controller-internal [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Routing controller-external [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Routing 32-bit Compatible Version [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Routing aggregated [20230902.110149_builder_junos_222_r3_s2]
# Redis [20230902.110149_builder_junos_222_r3_s2]
# JUNOS probe utility [20230902.110149_builder_junos_222_r3_s2]
# JUNOS common platform support [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Openconfig [22.2R3-S2.8]
# JUNOS mtx network modules [20230902.110149_builder_junos_222_r3_s2]
# JUNOS modules [20230902.110149_builder_junos_222_r3_s2]
# JUNOS mx modules [20230902.110149_builder_junos_222_r3_s2]
# JUNOS mx libs [20230902.110149_builder_junos_222_r3_s2]
# JUNOS L2 RSI Scripts [20230902.110149_builder_junos_222_r3_s2]
# JUNOS SQL Sync Daemon [20230902.110149_builder_junos_222_r3_s2]
# JUNOS mtx Data Plane Crypto Support [20230902.110149_builder_junos_222_r3_s2]
# JUNOS daemons [20230902.110149_builder_junos_222_r3_s2]
# JUNOS mx daemons [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Broadband Edge User Plane Apps [22.2R3-S2.8]
# Junos Remote Attestation package [1.0.0+20230902.110149_builder_junos_222_r3_s2]
# JUNOS appidd-mx application-identification daemon [20230902.110149_builder_junos_222_r3_s2]
# JUNOS TPM2 [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services URL Filter package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services TLB Service PIC package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Telemetry [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services TCP-LOG [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services SSL [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services SOFTWIRE [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Stateful Firewall [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services RTCOM [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services RPM [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services PCEF package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services NAT [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Mobile Subscriber Service Container package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services MobileNext Software package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Logging Report Framework package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services LL-PDF Container package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Jflow Container package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Deep Packet Inspection package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services IPSec [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services IDS [20230902.110149_builder_junos_222_r3_s2]
# JUNOS IDP Services [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services HTTP Content Management package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services DNS Filter package (i386) [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Crypto [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Captive Portal and Content Delivery Container package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services COS [20230902.110149_builder_junos_222_r3_s2]
# JUNOS AppId Services [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services Application Level Gateways [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Services AACL Container package [20230902.110149_builder_junos_222_r3_s2]
# JUNOS SDN Software Suite [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Extension Toolkit [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Phone-home [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Packet Forwarding Engine Support (wrlinux9) [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Packet Forwarding Engine Support (MX/EX92XX Common) [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Packet Forwarding Engine Support (M/T Common) [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Packet Forwarding Engine Support (aft) [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Packet Forwarding Engine Support (MX Common) [20230902.110149_builder_junos_222_r3_s2]
# JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20230902.110149_builder_junos_222_r3_s2]
# JUNOS J-Insight [20230902.110149_builder_junos_222_r3_s2]
# JUNOS jfirmware [20230518.103303_builder_junos_222_r3_s1]
# JUNOS Online Documentation [20230902.110149_builder_junos_222_r3_s2]
# JUNOS jail runtime [20230531.cf35cdf_builder_stable_12_222]
# JUNOS dsa dsa [22.2R3-S2.8]
# Hardware inventory:
# Item             Version  Part number  Serial number     Description
# Chassis                                FD380             JNP204 [MX204]
# Routing Engine 0          BUILTIN      BUILTIN           RE-S-1600x8
# CB 0             REV 43   750-069579   BCCX5510          JNP204 [MX204]
# FPC 0                     BUILTIN      BUILTIN           MPC
#   PIC 0                   BUILTIN      BUILTIN           4XQSFP28 PIC
#     Xcvr 0                NON-JNPR     ASTH20072900560   QSFP28-100G-CU2M
#     Xcvr 1       c        NON-JNPR     ASTH20121600034   QSFP28-100G-CU2M
#     Xcvr 2                NON-JNPR     ASTH20121600054   QSFP28-100G-CU2M
#     Xcvr 3       /C       NON-JNPR     ASTH20072900586   QSFP28-100G-CU3M
#   PIC 1                   BUILTIN      BUILTIN           8XSFPP PIC
# PEM 0            REV 04   740-070749   1F18B490045       JPSU-650W-AC-AO
# PEM 1            REV 04   740-070749   1F18B482769       JPSU-650W-AC-AO
# Fan Tray 0                                               Fan Tray, Front to Back Airflow - AFO
# Fan Tray 1                                               Fan Tray, Front to Back Airflow - AFO
# Fan Tray 2                                               Fan Tray, Front to Back Airflow - AFO
# License usage:
#                                  Licenses     Licenses    Licenses
# 				  Feature      Feature     Feature
#   Feature name                       used    installed      needed  Expiry
#   scale-subscriber                <count>           10           0    permanent
#   scale-l2tp                            0         1000           0    permanent
#   bgp                                   1            0           1    invalid
#   bfd-liveness-detection                1            0           1    invalid
#   dot1q-tunneling                       1            0           1    invalid
#   l3vpn                                 1            0           1    invalid
#   ldp                                   1            0           1    invalid
#   l3static                              1            0           1    invalid
#   l3vpn-instance-capacity               3            0           3    invalid
#   ospf                                  1            0           1    invalid
# 
# Licenses installed: none
# 
## Last commit: 2024-09-20 14:49:15 -03 by diego
version 22.2R3-S2.8;
groups {
    bridge-ptt-4096-macs {
        bridge-domains {
            <*> {
                bridge-options {
                    interface-mac-limit {
                        4096;
                    }
                }
            }
        }
    }
    TEMPLATE-INTERFACE-L3 {
        interfaces {
            <ae*> {
                unit <*> {
                    family inet {
                        mtu 1500;
                        policer {
                            arp ARP_POLICER;
                        }
                        sampling {
                            input;
                        }
                    }
                    family inet6 {
                        mtu 1500;
                        sampling {
                            input;
                        }
                    }
                }
            }
            irb {
                unit <*> {
                    family inet {
                        mtu 1500;
                        policer {
                            arp ARP_POLICER;
                        }
                        sampling {
                            input;
                        }
                    }
                    family inet6 {
                        mtu 1500;
                        sampling {
                            input;
                        }
                    }
                }
            }
            <lt*> {
                unit <*> {
                    family inet {
                        mtu 1500;
                        policer {
                            arp ARP_POLICER;
                        }
                        sampling {
                            input;
                        }
                    }
                    family inet6 {
                        mtu 1500;
                        sampling {
                            input;
                        }
                    }
                }
            }
        }
    }
    BFD-OSPF {
        routing-instances {
            <*> {
                protocols {
                    ospf {
                        area 0.0.0.0 {
                            interface <*> {
                                bfd-liveness-detection {
                                    minimum-interval 300;
                                    multiplier 4;
                                    full-neighbors-only;
                                }
                            }
                        }
                    }
                }
            }
        }
        protocols {
            ospf {
                area 0.0.0.0 {
                    interface <*> {
                        bfd-liveness-detection {
                            minimum-interval 300;
                            multiplier 4;
                            full-neighbors-only;
                        }
                    }
                }
            }
        }
    }
    TEMPLATE-INTERFACE-MPLS {
        interfaces {
            <ae*> {
                unit <*> {
                    family inet {
                        mtu 9100;
                        filter {
                            group 1;
                        }
                    }
                    family inet6 {
                        mtu 9100;
                    }
                    family mpls {
                        mtu 9100;
                    }
                }
            }
        }
    }
    firewall-log {
        firewall {
            family inet {
                filter DDOS-DROP-CHARGEN {
                    term DROP-CHARGEN {
                        then log;
                    }
                }
                filter DDOS-DROP-CLDAP {
                    term DROP-CLDAP {
                        then log;
                    }
                }
                filter DDOS-DROP-DNS {
                    term ACCEPT-DNS {
                        then log;
                    }
                    term DROP-DNS {
                        then log;
                    }
                }
                filter DDOS-DROP-ICMP-FRAG {
                    term DROP-ICMP-FRAG {
                        then log;
                    }
                }
                filter DDOS-DROP-LDAP {
                    term DROP-MEMCACHED {
                        then log;
                    }
                }
                filter DDOS-DROP-NTP {
                    term ACCEPT-NTP {
                        then log;
                    }
                    term DROP-NTP {
                        then log;
                    }
                }
                filter DDOS-DROP-OTHER-PROTOCOLS {
                    term DROP-OTHER-PROTOCOLS {
                        then log;
                    }
                }
                filter DDOS-DROP-PORT-0 {
                    term DROP-UDP-SPORT-0 {
                        then log;
                    }
                    term DROP-UDP-DPORT-0 {
                        then log;
                    }
                    term DROP-TCP-SPORT-0 {
                        then log;
                    }
                    term DROP-TCP-DPORT-0 {
                        then log;
                    }
                }
                filter DDOS-DROP-PROTO-0 {
                    term DDOS-DROP-PROTO-0 {
                        then log;
                    }
                }
                filter DDOS-DROP-SNMP {
                    term DROP-SNMP {
                        then log;
                    }
                }
                filter DDOS-DROP-SSDP {
                    term DROP-SSDP-SRC {
                        then log;
                    }
                    term DROP-SSDP-DST {
                        then log;
                    }
                }
                filter DDOS-TCP-FLAGS {
                    term FIN_SYN {
                        then log;
                    }
                    term "FIN_!ACK" {
                        then log;
                    }
                    term FIN_RST {
                        then log;
                    }
                    term "!FIN_!SYN_!RST_!ACK" {
                        then log;
                    }
                    term SYN_RST {
                        then log;
                    }
                    term FIN_URG {
                        then log;
                    }
                    term RST_URG {
                        then log;
                    }
                }
                filter accept-all {
                    term accept-all-tcp {
                        then log;
                    }
                    term accept-all-udp {
                        then log;
                    }
                    term accept-all-igmp {
                        then log;
                    }
                    term accept-icmp {
                        then log;
                    }
                    term accept-all-unknown {
                        then log;
                    }
                }
                filter accept-icmp {
                    term no-icmp-fragments {
                        then log;
                    }
                }
                filter discard-all {
                    term discard-ip-options {
                        then log;
                    }
                    term discard-TTL_1-unknown {
                        then log;
                    }
                    term discard-tcp {
                        then log;
                    }
                    term discard-netbios {
                        then log;
                    }
                    term discard-udp {
                        then log;
                    }
                    term discard-icmp {
                        then log;
                    }
                    term discard-unknown {
                        then log;
                    }
                }
            }
        }
    }
    firewall-syslog {
        firewall {
            family inet {
                filter DDOS-DROP-CHARGEN {
                    term DROP-CHARGEN {
                        then syslog;
                    }
                }
                filter DDOS-DROP-CLDAP {
                    term DROP-CLDAP {
                        then syslog;
                    }
                }
                filter DDOS-DROP-DNS {
                    term ACCEPT-DNS {
                        then syslog;
                    }
                    term DROP-DNS {
                        then syslog;
                    }
                }
                filter DDOS-DROP-ICMP-FRAG {
                    term DROP-ICMP-FRAG {
                        then syslog;
                    }
                }
                filter DDOS-DROP-LDAP {
                    term DROP-MEMCACHED {
                        then syslog;
                    }
                }
                filter DDOS-DROP-NTP {
                    term ACCEPT-NTP {
                        then syslog;
                    }
                    term DROP-NTP {
                        then syslog;
                    }
                }
                filter DDOS-DROP-OTHER-PROTOCOLS {
                    term DROP-OTHER-PROTOCOLS {
                        then syslog;
                    }
                }
                filter DDOS-DROP-PORT-0 {
                    term DROP-UDP-SPORT-0 {
                        then syslog;
                    }
                    term DROP-UDP-DPORT-0 {
                        then syslog;
                    }
                    term DROP-TCP-SPORT-0 {
                        then syslog;
                    }
                    term DROP-TCP-DPORT-0 {
                        then syslog;
                    }
                }
                filter DDOS-DROP-PROTO-0 {
                    term DDOS-DROP-PROTO-0 {
                        then syslog;
                    }
                }
                filter DDOS-DROP-SNMP {
                    term DROP-SNMP {
                        then syslog;
                    }
                }
                filter DDOS-DROP-SSDP {
                    term DROP-SSDP-SRC {
                        then syslog;
                    }
                    term DROP-SSDP-DST {
                        then syslog;
                    }
                }
                filter DDOS-TCP-FLAGS {
                    term FIN_SYN {
                        then syslog;
                    }
                    term "FIN_!ACK" {
                        then syslog;
                    }
                    term FIN_RST {
                        then syslog;
                    }
                    term "!FIN_!SYN_!RST_!ACK" {
                        then syslog;
                    }
                    term SYN_RST {
                        then syslog;
                    }
                    term FIN_URG {
                        then syslog;
                    }
                    term RST_URG {
                        then syslog;
                    }
                }
                filter accept-all {
                    term accept-all-tcp {
                        then syslog;
                    }
                    term accept-all-udp {
                        then syslog;
                    }
                    term accept-all-igmp {
                        then syslog;
                    }
                    term accept-icmp {
                        then syslog;
                    }
                    term accept-all-unknown {
                        then syslog;
                    }
                }
                filter discard-all {
                    term discard-ip-options {
                        then syslog;
                    }
                    term discard-TTL_1-unknown {
                        then syslog;
                    }
                    term discard-tcp {
                        then syslog;
                    }
                    term discard-netbios {
                        then syslog;
                    }
                    term discard-udp {
                        then syslog;
                    }
                    term discard-icmp {
                        then syslog;
                    }
                    term discard-unknown {
                        then syslog;
                    }
                }
            }
        }
    }
}
system {
    host-name OX-ASC-MX204;
    root-authentication {
        encrypted-password "$6$swklItNX$PPVeOJ8oQFdLa4ZXDcs8uDbtBFohiuzDoMEc1RaIOKkzCFCVTFRg41mn1bgUIiNRwmg/zRKI5bhT0/YsTU441."; ## SECRET-DATA
    }
    configuration-database {
        max-db-size 314572800;
    }
    login {
        class looking-glass {
            permissions view-configuration;
            allow-commands "(show)|(ping)|(traceroute)|(set cli)";
            deny-commands "(clear)|(file)|(file show)|(help)|(load)|(monitor)|(op)|(request)|(save)|(set)|(start)|(test)";
            allow-configuration show;
            deny-configuration all;
        }
        user alex {
            uid 2015;
            class super-user;
            authentication {
                encrypted-password "$6$CwamP0Lm$JP6D5CV6q2tGM.zqHe4Tx.6j3xBuIuXANWb4xDDQB1k5PRSjI4uYAXWuk.3u9r7zWlxDvD56nG8YzaLpQOv9c/"; ## SECRET-DATA
                ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC46LHESkhzw3wEbdo4PAoUBmdhWQsVWNaxEgj39yiHZ4NPpV23XEkJby22ecGH2fyWRTlTd2ShRW2g8OmK8BFpZWGF0b/+0uG0IbNz5XICcKZh60EPJQFGw+/6W8MwFEW7RADJnzpcR73K3xY3PMo6ML4WnRzdZQaSxNt0ZlREXAcYPSHRI2/Z7vZ0j9Flrm/BIOFw/J/pKhwxEj5gcwTDOtjpgNzuKXteD1oslNJJVJyqdCX8Ez0l2Zmd/r+hMN/GixoTxX1n03B5H0BYisBoS4QQneL10es4fL09etY/69AanRPA+ciMufSvPFto2EkTggtTAoXuQ4NF0EjEc56F alex@DESKTOP-L92KODO"; ## SECRET-DATA
            }
        }
        user backup {
            uid 2011;
            class super-user;
            authentication {
                encrypted-password "$6$yd1D1Qak$i2fKSp59Z.4YjlQ9nkuUQOxiiatNc5K9qataCGVZFVwo4.K/HS0NayHGrr9XMJSnvykFQbeHEe6wnm69ON8vI1"; ## SECRET-DATA
            }
        }
        user diego {
            uid 2017;
            class super-user;
            authentication {
                encrypted-password "$6$JZCsGjO2$RxyUFWEHQB.79npPCfSAIlJXHGh.OIwqSorrdK08xNn43z5i0o5Sn2G0jzvBRj0pFTByAs1oHZk0uYCV3Ds3o."; ## SECRET-DATA
                ssh-rsa "ssh-rsa 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 administrador@DIEGO"; ## SECRET-DATA
            }
        }
        user leandro {
            uid 2014;
            class super-user;
            authentication {
                encrypted-password "$6$qa.V7rtX$FKr7LB61UUOqSdK0zEy87SV5KIk7aDus9utRnVQw1wVzNzxPxdqRVmqsTpa.nhW5JFox4N4aUrNatGEEPQsIM."; ## SECRET-DATA
                ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs+qQxuRn65bjwFL7+/UmUmSedRF7DdKzJwRvLdXuy0+Kww+4wjzxIokFRVfiN5rbbr13qxncptkid2pf36KgTlJ/UvUDUUYV3yRSQM3dpB1WIMwTgZsgwW3ACunI0NVN+ov1MW4cuYUF2tQlIC3MAU6aj8v33YZRgr5Uv133y7RELA7mMzBOyYHUyjyfCsTfs6B2H8OfkjwebRl3G494AkKIaPKpTfwy01XeQHadMlP6g9NFKO901eJ0vneGl2dhYwWjHiKnFHWXPOZ3kWGX4FGSdDJk3LIzhnfzCpf1EXn/hsSEVZmObjqmrjUzytXHfs07BI/oJY5UarlTgjNMx leandro@MacBook-Air.local"; ## SECRET-DATA
            }
        }
        user lg {
            uid 2009;
            class looking-glass;
            authentication {
                encrypted-password "$6$154xrMe9$wiZ0AWoc.jMrXesdErC/puMw.y/I870jQy7Jw80NwvkDszRip6/9Ov7t2quV8poCE7Ecy4UmodMNLnipSC6mP."; ## SECRET-DATA
            }
        }
        user marcos {
            uid 2080;
            class super-user;
            authentication {
                encrypted-password "$6$oD4wzmtp$iBOBCYXWJGi0H0XO5CE7F1Mp3QMzz8mCRlxojSEREXCNdN.eZUrQumDUmdiGiRbn4k6uqVjGXGjdN.inujl8D0"; ## SECRET-DATA
            }
        }
        user openx {
            uid 2022;
            class super-user;
            authentication {
                encrypted-password "$6$6aWLUjtg$fTJjBlcaaWUStpN1L2.q5qbKUYLjT9M4/Fae2RkuSl6LHqccsofJ6d.dq1rYlRshK3kI/Kh9AvtTRVZzqU.Yy1"; ## SECRET-DATA
            }
        }
        user osmar {
            uid 2105;
            class super-user;
            authentication {
                encrypted-password "$6$RKFDWDst$n5wAZ1m8HP0P4Y2YCoMHkVo/.nPiq69f6Ep26T2xffeiTKEp0/JwoKYjU9mtDZeMqk0H48HsjzIwm0N8AtFt80"; ## SECRET-DATA
                ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hO2llK2EEFKZOOCl2hQny6YZEJtqoVegMNrqHtnGtRj1ml+HSJRCFTmGEOBIHF7NUrHj04jA5XPGszbfb5cFf5Q4xCwuo4BtI+Iw6SgHU345tahI45Uj47VY0D2DI4L1LenGTXjLuuL7HN8u9nrPnfgtkt7ZWA7a4MKi270MQNndbAe95a3s7TBhdmwpWChLlVyb+xwFyUIKQv1V3k0/tADAguGawJcCQa1l6AEFXA9HDL4rIBpRVDdA4z1V+hQJYSWZ/rpI6Sv/lffLvn7HEc2jdA19vgX0ltgc4dQx25i9d3dDZIKTduBLltTo94gaRUxgygfIA0MGw0PVkczF osmar@MacBook-Air.local"; ## SECRET-DATA
            }
        }
        user raigomes {
            uid 2024;
            class super-user;
            authentication {
                encrypted-password "$6$bzRrwjzR$l8vC1yRDJq5U9GuKVk9x.m2N4x4khM3dbczHohXGOrevTY6q9oq0ydDVZtLK2VSB6jvxkrJQisOOOvF2uCBpu1"; ## SECRET-DATA
                ssh-rsa "ssh-rsa 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 raigomes@MacBook-Pro.local” "; ## SECRET-DATA
            }
        }
        user renato {
            uid 2013;
            class super-user;
            authentication {
                encrypted-password "$6$Wey2vO8q$PqZEQdDLwmbM4wkAT2Rx45dS4okgIv/nynhi3ZeUQ4uuygeDW/dzC0jhbxruIZ7gEI1eizbaTDwjzDjJG/GZd."; ## SECRET-DATA
                ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5OzyPxWPGAyjHWOe0bpQ26tdy7hzuKiBTuBIdPOB5dksDjU3MHuTxZuHqEVIWr0L/n4MIOuQjB/1Znu40QOc0Jw5qFxMp85GgPHuVBGo9qsuacNj+Y8CpkrCVNoKgEYnFMEuvCi/N8a1rJGBm+EqgFlvxf7n5zCD74746OIf5ws= renato@joejoe"; ## SECRET-DATA
            }
        }
    }
    export-format {
        state-data {
            json {
                compact;
            }
        }
    }
    services {
        ssh {
            sftp-server;
            port 5612;
        }
        extension-service {
            request-response {
                grpc {
                    clear-text {
                        port 32767;
                    }
                    skip-authentication;
                }
            }
            notification {
                allow-clients {
                    address 0.0.0.0/0;
                }
            }
        }
        netconf {
            ssh;
        }
        subscriber-management {
            enable;
        }
    }
    time-zone America/Fortaleza;
    arp {
        aging-timer 240;
    }
    management-instance;
    authentication-order [ radius password ];
    radius-server {
        177.91.160.80 {
            port 1812;
            accounting-port 1813;
            secret "$9$3vYpnpOhSeKv836SreWXxaJGDjqfT3CpBDiA0"; ## SECRET-DATA
            source-address 138.36.165.4;
        }
    }
    syslog {
        file firewall.log {
            firewall any;
        }
        file interactive-commands {
            interactive-commands any;
        }
        file messages {
            any error;
            authorization info;
            archive size 10m files 100;
        }
        time-format year millisecond;
    }
    processes {
        routing {
            inactive: bgp {
                rib-sharding {
                    number-of-shards 4;
                }
                update-threading {
                    number-of-threads 4;
                }
            }
        }
        dhcp-service {
            traceoptions {
                file dhcp_logfile size 10m;
                level all;
                flag packet;
            }
        }
    }
    ntp {
        server 177.91.162.90;
        server 177.91.160.90;
        server 138.36.164.35;
        source-address 138.36.165.4;
    }
}
chassis {
    aggregated-devices {
        ethernet {
            device-count 3;
        }
    }
    fpc 0 {
        pic 0 {
            port 0 {
                speed 100g;
            }
            port 1 {
                speed 100g;
            }
            port 2 {
                speed 100g;
            }
            port 3 {
                speed 100g;
            }
        }
        pic 1 {
            number-of-ports 0;
        }
        sampling-instance OX-NETFLOW;
        inline-services {
            use-extended-flow-memory;
            flow-table-size {
                ipv4-flow-table-size 10;
                ipv6-flow-table-size 5;
            }
        }
    }
    network-services enhanced-ip;
}
services {
    flow-monitoring {
        version-ipfix {
            template ipv4 {
                flow-active-timeout 10;
                flow-inactive-timeout 10;
                template-refresh-rate {
                    packets 30;
                    seconds 60;
                }
                option-refresh-rate {
                    packets 30;
                    seconds 30;
                }
                ipv4-template;
                flow-key {
                    flow-direction;
                    vlan-id;
                }
            }
            template ipv6 {
                flow-active-timeout 10;
                flow-inactive-timeout 10;
                template-refresh-rate {
                    packets 1000;
                    seconds 10;
                }
                option-refresh-rate {
                    packets 1000;
                    seconds 10;
                }
                ipv6-template;
                flow-key {
                    flow-direction;
                    vlan-id;
                }
            }
        }
    }
    analytics {
        streaming-server SRV;
        streaming-server KENTIK-REMOTE {
            remote-address 208.76.14.254;
            remote-port 20023;
        }
        export-profile PROFILE;
        export-profile KENTIK-PROF {
            local-address 138.36.165.4;
            local-port 30010;
            reporting-rate 30;
            format gpb;
            transport udp;
        }
        sensor firewall-counters {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/firewall/;
        }
        sensor sensor-optics {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/optics/;
        }
        sensor sensor-transceiver {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/transceiver/;
        }
        sensor sensor-flow {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/services/inline-jflow/;
        }
        sensor sensor-14 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/interface/;
        }
        sensor sensor-1 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/packet/usage/;
        }
        sensor sensor-2 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/cpu/memory/;
        }
        sensor sensor-12 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/fabric/;
        }
        sensor sensor-15 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/interface/logical/usage/;
        }
        sensor sensor-17 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/npu/memory/;
        }
        sensor sensor-18 {
            server-name SRV;
            export-name PROFILE;
            resource /junos/system/linecard/npu/utilization/;
        }
        sensor KENTIK-SENSOR {
            server-name KENTIK-REMOTE;
            export-name KENTIK-PROF;
            resource /junos/system/linecard/interface/;
        }
        sensor KENTIK-SENSOR_LOGICAL {
            server-name KENTIK-REMOTE;
            export-name KENTIK-PROF;
            resource /junos/system/linecard/interface/logical/usage/;
        }
        sensor interface {
            server-name SRV;
            export-name PROFILE;
            resource /interfaces/interface/state/;
        }
    }
}
interfaces {
    apply-groups TEMPLATE-INTERFACE-L3;
    et-0/0/0 {
        description OX-SP4-0103-EDGE64-1-PT51;
        gigether-options {
            802.3ad ae2;
            fec fec91;
        }
    }
    et-0/0/1 {
        description OX-SP4-0103-EDGE64-1-PT52;
        gigether-options {
            802.3ad ae2;
            fec fec91;
        }
    }
    et-0/0/2 {
        description OX-SP4-0103-EDGE64-1-PT53;
        gigether-options {
            802.3ad ae2;
            fec fec91;
        }
    }
    et-0/0/3 {
        description OX-SP4-0103-EDGE64-1-PT54;
        gigether-options {
            802.3ad ae2;
            fec fec91;
        }
    }
    ae2 {
        description OX-SP4-0103-EDGE64-1-PO2;
        flexible-vlan-tagging;
        mtu 9216;
        encapsulation flexible-ethernet-services;
        aggregated-ether-options {
            lacp {
                active;
                periodic slow;
            }
        }
        unit 2 {
            description WAN_PTT-AICX-ASC_VL2;
            vlan-id 2;
            family inet {
                address 172.29.9.139/29;
            }
            family inet6 {
                address fd00:2804:ad4:3::18b/125;
            }
        }
        unit 26 {
            vlan-id 26;
            family inet {
                address 100.91.248.250/31;
            }
        }
        unit 70 {
            description WAN_PEER-GLOBO-ASC_VL70;
            vlan-id 70;
            family inet {
                address 138.36.165.8/31;
            }
            family inet6 {
                address 2804:11dc:80c0:70::1/126;
            }
        }
        unit 400 {
            description CLI_IP-FUTURANET-ASC_VL400;
            vlan-id 400;
            family inet {
                filter {
                    input RPM-FUTURANET;
                    output-list [ DDOS-FUTURANET DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ];
                }
                address 138.36.165.24/31;
                address 138.36.165.26/31;
                address 138.36.165.28/31;
            }
            family inet6 {
                address 2804:11dc:30c0:400::1/126;
                address 2804:11dc:80c0:400::1/126;
            }
        }
        unit 401 {
            description CLI_IP-WCM-ASC_VL401;
            vlan-id 401;
            family inet {
                address 138.36.165.38/31;
            }
            family inet6;
        }
        unit 402 {
            description CLI_IP-WCM-V6_ASC_VL402;
            vlan-id 402;
            family inet6 {
                address 2804:11dc:80c0:402::1/126;
            }
        }
        unit 429 {
            description WAN_IP-PEER1-ASC_VL429;
            vlan-id 429;
            family inet {
                address 172.17.1.250/30;
            }
            family inet6 {
                address 2607:1640:1031::125/127;
            }
        }
        unit 446 {
            description CLI_IP-VIA-FIBRA-ASC_VL446;
            vlan-id 446;
            family inet {
                address 138.36.165.46/31;
            }
            family inet6 {
                address 2804:11dc:30c0:446::1/126;
            }
        }
        unit 551 {
            description WAN_IP-CDNSTAR-ASC_VL551;
            vlan-id 551;
            family inet {
                address 172.16.0.117/31;
            }
            family inet6 {
                address fc00:8780:1::117/127;
            }
        }
        unit 3896 {
            description WAN_PTT-IX_SP-V4_ASC_VL3896;
            vlan-id 3896;
            family inet {
                filter {
                    input PTT-IN;
                }
                policer {
                    arp limite_arp_ptt-sp;
                }
                address 187.16.214.191/20;
            }
        }
        unit 3897 {
            description WAN_PTT-IX_SP-V6_ASC_VL3897;
            vlan-id 3897;
            family inet6 {
                filter {
                    input V6_PTT-IN;
                }
                address 2001:12f8::214:191/64;
            }
        }
        unit 3909 {
            description WAN_IP-DURAND-ASC_VL3909;
            vlan-id 3909;
            family inet {
                filter {
                    input-list [ DDOS-OPENX DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ];
                }
                address 200.170.83.55/31;
            }
            family inet6 {
                address 2001:129c:0:34::121/127;
            }
        }
        unit 3910 {
            description WAN_IP-FLYS-ASC_VL3910;
            vlan-id 3910;
            family inet {
                filter {
                    input-list [ DDOS-OPENX DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ];
                }
                address 189.1.33.21/31;
            }
            family inet6 {
                address 2804:3e8:0:f::31/127;
            }
        }
        unit 4006 {
            description WAN_IP-COGENT-ASC_MX204;
            vlan-id 4006;
            family inet {
                filter {
                    input-list [ DDOS-OPENX DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ];
                }
                address 199.100.30.65/31;
            }
            family inet6 {
                address 2804:5330:2:8::8:1/127;
            }
        }
        unit 10080 {
            apply-groups TEMPLATE-INTERFACE-MPLS;
            description CORE_IP-VBD-DCI_VIA_LAP_VL56;
            vlan-tags outer 56 inner 100;
            family inet {
                address 100.91.0.33/31;
            }
        }
        unit 10280 {
            apply-groups TEMPLATE-INTERFACE-MPLS;
            description CORE_IP-SP2-ASC_VL52;
            vlan-tags outer 52 inner 100;
            family inet {
                address 100.91.0.37/31;
            }
        }
        unit 10480 {
            apply-groups TEMPLATE-INTERFACE-MPLS;
            description CORE_IP-SP4-MX304;
            vlan-tags outer 62 inner 100;
            family inet {
                address 100.91.0.39/31;
            }
        }
        unit 11080 {
            apply-groups TEMPLATE-INTERFACE-MPLS;
            description CORE_IP-VBD-DCI_VIA_COT_VL66;
            vlan-tags outer 66 inner 100;
            family inet {
                address 100.91.0.133/31;
            }
        }
    }
    fxp0 {
        unit 0 {
            family inet {
                address 100.91.248.2/26;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                filter {
                    input-list [ accept-common-services accept-bgp accept-ospf accept-bfd accept-ldp accept-established discard-all ];
                }
                address 138.36.165.4/32;
            }
            family inet6 {
                address 2804:11dc:8000::/128;
            }
        }
        unit 1 {
            family inet {
                address 100.91.164.1/32;
            }
        }
    }
}
snmp {
    location "OX-SP4-Equinix SP4-CAGE";
    contact "NOC Open X <noc@openx.com.br>";
    filter-interfaces {
        interfaces {
            "et-[0-9]/[0-9]/[0-9]+\.[0-9]+";
        }
    }
    stats-cache-lifetime 1;
    filter-duplicates;
    client-list openx0 {
        54.207.12.38/32;
        177.91.160.0/24;
        177.91.162.0/24;
        177.91.163.96/29;
    }
    community Op3nX {
        authorization read-only;
        client-list-name openx0;
    }
    community k3nt1k {
        authorization read-only;
        clients {
            209.50.158.0/23;
        }
    }
}
forwarding-options {
    sampling {
        input {
            rate 20000;
        }
        instance {
            OX-NETFLOW {
                input {
                    rate 20000;
                    run-length 0;
                    max-packets-per-second 65535;
                }
                family inet {
                    output {
                        flow-inactive-timeout 15;
                        flow-active-timeout 60;
                        flow-server 138.36.164.38 {
                            port 1642;
                            autonomous-system-type origin;
                            no-local-dump;
                            version-ipfix {
                                template {
                                    ipv4;
                                }
                            }
                        }
                        flow-server 177.91.160.76 {
                            port 2055;
                            autonomous-system-type origin;
                            no-local-dump;
                            version-ipfix {
                                template {
                                    ipv4;
                                }
                            }
                        }
                        flow-server 208.76.14.254 {
                            port 20013;
                            autonomous-system-type origin;
                            no-local-dump;
                            version-ipfix {
                                template {
                                    ipv4;
                                }
                            }
                        }
                        inline-jflow {
                            source-address 138.36.165.4;
                            flow-export-rate 3200;
                        }
                    }
                }
                family inet6 {
                    output {
                        flow-server 138.36.164.38 {
                            port 1642;
                            autonomous-system-type origin;
                            no-local-dump;
                            version-ipfix {
                                template {
                                    ipv6;
                                }
                            }
                        }
                        flow-server 208.76.14.254 {
                            port 20013;
                            autonomous-system-type origin;
                            no-local-dump;
                            version-ipfix {
                                template {
                                    ipv6;
                                }
                            }
                        }
                        inline-jflow {
                            source-address 138.36.165.4;
                        }
                    }
                }
            }
        }
    }
}
policy-options {
    prefix-list router-ipv4 {
        apply-path "interfaces <*> unit <*> family inet address <*>";
    }
    prefix-list bgp-neighbors {
        apply-path "protocols bgp group <*> neighbor <*>";
    }
    prefix-list ospf {
        100.91.242.1/32;
        138.36.165.5/32;
        177.91.160.0/32;
        177.91.160.1/32;
        177.91.162.0/32;
        177.91.162.1/32;
        224.0.0.5/32;
        224.0.0.6/32;
    }
    prefix-list rfc1918 {
        10.0.0.0/8;
        172.16.0.0/12;
        192.168.0.0/16;
    }
    prefix-list rip {
        224.0.0.9/32;
    }
    prefix-list vrrp {
        224.0.0.18/32;
    }
    prefix-list multicast-all-routers {
        224.0.0.2/32;
    }
    prefix-list router-ipv4-logical-systems {
        apply-path "logical-systems <*> interfaces <*> unit <*> family inet address <*>";
    }
    prefix-list bgp-neighbors-logical-systems {
        apply-path "logical-systems <*> protocols bgp group <*> neighbor <*>";
    }
    prefix-list radius-servers {
        apply-path "system radius-server <*>";
    }
    prefix-list tacacs-servers {
        apply-path "system tacplus-server <*>";
    }
    prefix-list ntp-server {
        apply-path "system ntp server <*>";
    }
    prefix-list snmp-client-lists {
        apply-path "snmp client-list <*> <*>";
    }
    prefix-list snmp-community-clients {
        apply-path "snmp community <*> clients <*>";
    }
    prefix-list localhost {
        127.0.0.1/32;
    }
    prefix-list ntp-server-peers {
        apply-path "system ntp peer <*>";
    }
    prefix-list dns-servers {
        apply-path "system name-server <*>";
    }
    prefix-list gerencia_openx {
        54.207.12.38/32;
        100.91.240.0/24;
        100.91.244.0/26;
        138.36.164.35/32;
        177.91.160.0/24;
        177.91.162.0/24;
        177.91.163.96/29;
        200.233.174.134/32;
    }
    prefix-list bgp-neighbors-routing-instances {
        apply-path "routing-instances <*> protocols bgp group <*> neighbor <*>";
    }
    prefix-list DNS-PUBLIC-RESOLVER {
        1.0.0.1/32;
        1.1.1.1/32;
        8.8.4.4/32;
        8.8.8.8/32;
        9.9.9.9/32;
        9.9.9.11/32;
        149.112.112.11/32;
        149.112.112.112/32;
        177.91.160.99/32;
        177.91.160.100/32;
        208.67.220.220/32;
        208.67.222.222/32;
    }
    prefix-list NTP-PUBLIC {
        17.253.110.125/32;
        20.124.240.168/32;
        40.119.6.228/32;
        91.189.91.157/32;
        91.189.94.4/32;
        129.6.15.28/32;
        129.6.15.29/32;
        132.163.96.1/32;
        132.163.96.2/32;
        132.163.96.3/32;
        132.163.96.4/32;
        132.163.96.6/32;
        132.163.97.1/32;
        132.163.97.2/32;
        132.163.97.3/32;
        132.163.97.4/32;
        132.163.97.6/32;
        138.36.164.35/32;
        162.159.200.1/32;
        162.159.200.123/32;
        177.91.160.90/32;
        177.91.162.90/32;
        185.125.190.56/32;
        185.125.190.57/32;
        185.125.190.58/32;
        192.5.41.40/32;
        192.5.41.41/32;
        200.160.7.186/32;
        200.189.40.8/32;
        216.239.35.0/32;
        216.239.35.4/32;
        216.239.35.8/32;
        216.239.35.12/32;
    }
    prefix-list GRE-EXCEPT {
        1.1.1.1/32;
        162.159.67.228/32;
        172.64.243.228/32;
    }
    prefix-list KENTIK-NOSEND {
        0.0.0.0/0;
    }
    prefix-list ldp-peers {
        apply-path "protocols ldp neighbor <*>";
    }
    prefix-list CLI-FUTURANET-V4 {
        38.250.197.0/24;
        45.177.192.0/22;
        128.201.140.0/22;
        177.137.16.0/21;
        177.137.17.0/24;
        177.137.24.0/21;
        186.216.0.0/18;
        186.251.128.0/21;
        186.251.136.0/22;
        186.251.140.0/22;
        187.62.224.0/19;
    }
    prefix-list CLI-FUTURANET-V6 {
        2804:164::/32;
        2804:644::/32;
        2804:3ef4::/32;
        2804:5e64::/32;
    }
    prefix-list CLI-WCM-V4 {
        45.161.232.0/22;
        167.249.164.0/22;
    }
    prefix-list CLI-WCM-V6 {
        2804:2c04::/32;
        2804:51cc::/32;
    }
    prefix-list CLI-VIAFIBRA-V4 {
        177.10.224.0/21;
        191.7.168.0/21;
    }
    prefix-list CLI-VIAFIBRA-V6 {
        2804:1450::/32;
    }
    route-filter-list BOGONS {
        0.0.0.0/8 orlonger;
        10.0.0.0/8 orlonger;
        100.64.0.0/10 orlonger;
        127.0.0.0/8 orlonger;
        169.254.0.0/16 orlonger;
        172.16.0.0/12 orlonger;
        192.0.0.0/24 orlonger;
        192.0.2.0/24 orlonger;
        192.168.0.0/16 orlonger;
        198.18.0.0/15 orlonger;
        198.51.100.0/24 orlonger;
        203.0.113.0/24 orlonger;
        224.0.0.0/3 orlonger;
    }
    route-filter-list PREFIX_V4-SONIK {
        200.142.225.0/24 upto /32;
    }
    policy-statement BGP-CLI-OUT-FULL {
        term DEFAULT {
            from policy DEFAULT;
            then accept;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term ACCEPT {
            from protocol bgp;
            then accept;
        }
    }
    policy-statement BGP-CLI-OUT-PARCIAL {
        term DEFAULT {
            from policy DEFAULT;
            then accept;
        }
        term ROTAS {
            from community [ PREFIX-ASN PREFIX-CLIENT-IP PREFIX-WAN-PEER ];
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-CLI-OUT-PARCIAL-PTT {
        term DEFAULT {
            from policy DEFAULT;
            then accept;
        }
        term ROTAS {
            from community [ PREFIX-ASN PREFIX-CLIENT-IP PREFIX-WAN-PEER PREFIX-WAN-PTT ];
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-FILTRO-CLIENTE-IP-in {
        term BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                local-preference 666;
                next-hop discard;
                accept;
            }
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 550;
                community add PREFIX-CLIENT-IP;
                community add PREFIX-ORIGIN-THIS-ROUTER;
                next-hop peer-address;
                accept;
            }
        }
    }
    policy-statement BGP-FILTRO-PTT-in {
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term BLACKLIST {
            from community BLACKLIST_GERAL;
            then {
                community delete BLACKLIST_GERAL;
                next term;
            }
        }
        term MEUS-PREFIXOS {
            from policy MEUS-PREFIXOS;
            then reject;
        }
    }
    policy-statement BGP-IP-CDNSTAR-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term AS {
            from as-path-group AS-CDNSTAR;
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term MELHORAR {
            from as-path-group AS-CDNSTAR-MELHORAR;
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-CDNSTAR-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 250;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-CDNSTAR-out {
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term MED-SP2 {
            from community PREFIX-ORIGIN-SP2;
            then {
                metric 10;
                next term;
            }
        }
        term MED-SP4 {
            from community PREFIX-ORIGIN-SP4;
            then {
                metric 10;
                next term;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term ALGAR_INT-NO_EXPORT {
            then {
                community add IP-CDNSTAR-ALGAR_INT-NO_EXPORT;
                next term;
            }
        }
        term NO_ADVERTISE {
            then {
                community add CDNSTAR-NO_ADVERTISE;
                next term;
            }
        }
        term +0 {
            from community [ IP-CDNSTAR+0 IP+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community [ IP-CDNSTAR-NO_EXPORT NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-CDNSTAR+1 IP+1 ];
            then {
                as-path-prepend 263444;
                next term;
            }
        }
        term +2 {
            from community [ IP-CDNSTAR+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                next term;
            }
        }
        term +3 {
            from community [ IP-CDNSTAR+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-COGENT-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term AS {
            from as-path-group AS-COGENT;
            then {
                local-preference 360;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term CLOUDFARE {
            from policy FILTRO-CLOUDFARE;
            then reject;
        }
        term MELHORAR {
            from as-path-group AS-COGENT-MELHORAR;
            then {
                local-preference 260;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-COGENT-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 245;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-COGENT-out {
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                community add IP-COGENT-BLACKHOLE;
                accept;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term HIGHPREF {
            then {
                community add IP-COGENT-HIGHPREF;
                next term;
            }
        }
        term +0 {
            from community [ IP-COGENT+0 IP+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-COGENT-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-COGENT+1 IP+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ IP-COGENT+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ IP-COGENT+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-DURAND-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term AS-DURAND-BUGADO {
            from as-path-group AS-DURAND-BUGADO;
            then reject;
        }
        term ROTAS-DURAND-OK {
            from community IP-DURAND-FROM_4230;
            then {
                local-preference 250;
                accept;
            }
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term ALGAR {
            from {
                route-filter 200.187.160.0/20 prefix-length-range /20-/32;
            }
            then reject;
        }
        term GLOBO {
            from {
                route-filter 131.0.24.0/22 prefix-length-range /23-/32;
            }
            then reject;
        }
        term AS {
            from as-path-group AS-DURAND;
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term CLOUDFARE {
            from policy FILTRO-CLOUDFARE;
            then reject;
        }
        term MELHORAR {
            from as-path-group AS-DURAND-MELHORAR;
            then {
                local-preference 260;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-DURAND-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 250;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-DURAND-out {
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term MED-SP2 {
            from community PREFIX-ORIGIN-SP2;
            then {
                metric 10;
                next term;
            }
        }
        term FILTRO-BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                community add IP-DURAND-BLACKHOLE;
                accept;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term NO_PTT {
            then {
                community add IP-DURAND-NO_PTT;
                next term;
            }
        }
        term NO_EDGEUNO_COGENT {
            then {
                community add IP-DURAND-NO_EDGEUNO_COGENT;
                next term;
            }
        }
        term +0 {
            from community IP-DURAND+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-DURAND-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-DURAND+1 IP+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ IP-DURAND+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ IP-DURAND+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-FLYS-out {
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term MED-SP2 {
            from community PREFIX-ORIGIN-SP2;
            then {
                metric 10;
                next term;
            }
        }
        term FILTRO-BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                community add IP-DURAND-BLACKHOLE;
                accept;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term NO_PTT {
            then {
                community add IP-DURAND-NO_PTT;
                next term;
            }
        }
        term NO_EDGEUNO_COGENT {
            then {
                community add IP-DURAND-NO_EDGEUNO_COGENT;
                next term;
            }
        }
        term +0 {
            from community IP-FLYS+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-FLYS-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-FLYS+1 IP+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ IP-FLYS+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ IP-FLYS+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-GLOBENET-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term DENY {
            from as-path-group [ BRADESCO BB ];
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term AS {
            from as-path-group AS-GLOBENET;
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term MELHORAR {
            from as-path-group AS-GLOBENET-MELHORAR;
            then {
                local-preference 270;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-GLOBENET-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-GLOBENET-out {
        inactive: term ALGAR {
            then {
                community add IP-GLOBENET-NO_ALGAR;
                next term;
            }
        }
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                community add IP-GLOBENET-BLACKHOLE;
                accept;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term NO_PTT {
            then {
                community add IP-GLOBENET-NO_PTT;
                next term;
            }
        }
        term +0 {
            from community IP-GLOBENET+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-GLOBENET-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-GLOBENET+1 IP+1 ];
            then {
                as-path-prepend 263444;
                next term;
            }
        }
        term +2 {
            from community [ IP-GLOBENET+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                next term;
            }
        }
        term +3 {
            from community [ IP-GLOBENET+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then {
                inactive: as-path-prepend 263444;
                accept;
            }
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-PEER1-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term NO_IMPORT {
            from as-path-group [ PEER1-NO-IMPORT PEER1-NO_IMPORT ];
            then reject;
        }
        term AS {
            from as-path-group AS-PEER1;
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term MELHORAR {
            from as-path-group AS-PEER1-MELHORAR;
            then {
                local-preference 260;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-PEER1-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 250;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-PEER1-out {
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term MED-SP2 {
            from community PREFIX-ORIGIN-SP2;
            then {
                metric 10;
                next term;
            }
        }
        term FILTRO-BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                community add IP-PEER1-BLACKHOLE;
                accept;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term NO_ADVERTISE {
            then {
                community add IP-PEER1-NO_ADVERTISE;
                next term;
            }
        }
        term +0 {
            from community IP-PEER1+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-PEER1-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-PEER1+1 IP+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ IP-PEER1+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ IP-PEER1+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-SPARKLE-in {
        term DENY {
            from as-path-group DENY_SPARKLE-IN;
            then reject;
        }
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term AS {
            from as-path-group AS-SPARKLE;
            then {
                local-preference 360;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term AMAZON {
            from {
                route-filter 52.94.13.0/24 exact;
            }
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term CLOUDFARE {
            from policy FILTRO-CLOUDFARE;
            then reject;
        }
        term MELHORAR {
            from as-path-group AS-SPARKLE-MELHORAR;
            then {
                local-preference 260;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-SPARKLE-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 230;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-SPARKLE-out {
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-BLACKHOLE {
            from policy FILTRO-BLACKHOLE;
            then {
                community add IP-SPARKLE-BLACKHOLE;
                accept;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community IP-SPARKLE+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-SPARKLE-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-SPARKLE+1 IP+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ IP-SPARKLE+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ IP-SPARKLE+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-IP-VIVO-in {
        term PTT-SP-VALIDO {
            from community IP-VIVO-PTT_SP_VALIDO;
            then reject;
        }
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term DENY {
            from as-path-group DENY_VIVO_IN;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term TEMP {
            from as-path-group AS-CARAJAS-PA;
            then {
                local-preference 360;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term AS {
            from as-path-group AS-VIVO;
            then {
                local-preference 360;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term CLOUDFARE {
            from policy FILTRO-CLOUDFARE;
            then reject;
        }
        term MELHORAR {
            from as-path-group AS-VIVO-MELHORAR;
            then {
                local-preference 260;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-VIVO-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 250;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-IP-VIVO-out {
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then {
                community add IP-VIVO-SO_VIVO;
                next term;
            }
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ IP-VIVO+0 IP+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT IP-NO_EXPORT IP-VIVO-NO_EXPORT ];
            then reject;
        }
        term +1 {
            from community [ IP-VIVO+1 IP+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ IP-VIVO+2 IP+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ IP-VIVO+3 IP+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then {
                community add IP-VIVO-SO_VIVO;
                accept;
            }
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-NEGA-TUDO {
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-AKAMAI-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 450;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-AKAMAI-out {
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term HIGH_PREFERENCE {
            then {
                community add PEER-AKAMAI-HIGH_PREFERENCE;
                next term;
            }
        }
        term +0 {
            from community [ PEER-AKAMAI+0 PEER+0 ];
            then accept;
        }
        inactive: term NO_EXPORT {
            from community PEER-AKAMAI-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-AKAMAI+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PEER-AKAMAI+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PEER-AKAMAI+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-ALT-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term AS {
            from as-path-group AS-ALT;
            then {
                local-preference 360;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term MELHORAR {
            from as-path-group AS-ALT-MELHORAR;
            then {
                local-preference 270;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-ALT-PIORAR;
            then {
                local-preference 240;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 250;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-ALT-out {
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-ALT+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-ALT-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-ALT+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PEER-ALT+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PEER-ALT+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-AMAZON-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term AS {
            from as-path-group AS-AMAZON;
            then {
                local-preference 459;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term MELHORAR {
            from as-path-group AS-AMAZON-MELHORAR;
            then {
                local-preference 469;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-AMAZON-PIORAR;
            then {
                local-preference 439;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 449;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-AMAZON-out {
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-AMAZON+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-AMAZON-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-AMAZON+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PEER-AMAZON+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PEER-AMAZON+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-CDN77-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term DISCARD {
            from {
                route-filter 138.199.4.87/32 exact;
            }
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 450;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-CDN77-out {
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-CDN77+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-CDN77-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-CDN77+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PEER-CDN77+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PEER-CDN77+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-CLOUDFARE-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term AS {
            from as-path-group AS-CLOUDFARE;
            then {
                local-preference 360;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term ACCEPT {
            then {
                local-preference 250;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-CLOUDFARE-out {
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-CLOUDFARE+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-CLOUDFARE-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-CLOUDFARE+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                next term;
            }
        }
        term +2 {
            from community [ PEER-CLOUDFARE+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                next term;
            }
        }
        term +3 {
            from community [ PEER-CLOUDFARE+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-FASTLY-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 450;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-FASTLY-out {
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-FASTLY+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-FASTLY-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-FASTLY+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                next term;
            }
        }
        term +2 {
            from community [ PEER-FASTLY+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                next term;
            }
        }
        term +3 {
            from community [ PEER-FASTLY+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-GLOBO-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 449;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term AS {
            from as-path-group AS-GLOBO;
            then {
                local-preference 459;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
        term MELHORAR {
            from as-path-group AS-GLOBO-MELHORAR;
            then {
                local-preference 469;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
        term PIORAR {
            from as-path-group AS-GLOBO-PIORAR;
            then {
                local-preference 439;
                community add PREFIX-WAN-IP;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-GLOBO-out {
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-GLOBO+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-GLOBO-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-GLOBO+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                next term;
            }
        }
        term +2 {
            from community [ PEER-GLOBO+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                next term;
            }
        }
        term +3 {
            from community [ PEER-GLOBO+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PEER-X99-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 450;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PEER-X99-out {
        term BGP-IP-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community [ PEER-X99+0 PEER+0 ];
            then accept;
        }
        term NO_EXPORT {
            from community PEER-X99-NO_EXPORT;
            then reject;
        }
        term +1 {
            from community [ PEER-X99+1 PEER+1 ];
            then {
                as-path-prepend 263444;
                next term;
            }
        }
        term +2 {
            from community [ PEER-X99+2 PEER+2 ];
            then {
                as-path-prepend "263444 263444";
                next term;
            }
        }
        term +3 {
            from community [ PEER-X99+3 PEER+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PTT-AICX-SP-in {
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term DENY_PTT_IN {
            from as-path-group DENY_PTT_IN;
            then reject;
        }
        term BOGONS-ASN {
            from as-path-group BOGON-ASN;
            then reject;
        }
        term FILTRO-PTT {
            to policy BGP-FILTRO-PTT-in;
        }
        term AS-PTT+WAN_PEER {
            from as-path-group AS-PTT+WAN_PEER;
            then {
                community add PREFIX-WAN-PEER;
                next term;
            }
        }
        term ACCEPT {
            then {
                local-preference 280;
                community add PREFIX-WAN-PTT;
                accept;
            }
        }
    }
    policy-statement BGP-PTT-AICX-SP-out {
        term BGP-PTT-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community PTT-AICX-SP+0;
            then accept;
        }
        term +1 {
            from community PTT-AICX-SP+1;
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community PTT-AICX-SP+2;
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community PTT-AICX-SP+3;
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term NO_EXPORT {
            from community [ NO_EXPORT PTT-AICX-SP-NO_EXPORT ];
            then reject;
        }
        term PTT-AICX-SP-NO_ADVERTISE {
            then {
                community add PTT-AICX-SP-NO_ADVERTISE;
                next term;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PTT-PEER-AMAZON-out {
        term BGP-PTT-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community PTT-SP+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT PTT-SP-AMAZON-NO_EXPORT ];
            then reject;
        }
        term PTT-SP-NO_ADVERTISE {
            then {
                community add PTT-SP-NO_ADVERTISE;
            }
        }
        term +1 {
            from community [ PTT-SP+1 PTT+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PTT-SP+2 PTT+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PTT-SP+3 PTT+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PTT-PEER-in {
        term MEUS-PREFIXOS {
            from policy MEUS-PREFIXOS;
            then reject;
        }
        term DENY_PEER_IN {
            from as-path-group DENY_PEER_IN;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 450;
                community add PREFIX-WAN-PEER;
                accept;
            }
        }
    }
    policy-statement BGP-PTT-PEER-out {
        term BGP-PTT-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        inactive: term MED_PROVISORIO {
            then {
                metric add 15;
                next term;
            }
        }
        term +0 {
            from community PTT-SP+0;
            then accept;
        }
        term NO_EXPORT {
            from community NO_EXPORT;
            then reject;
        }
        term PTT-SP-NO_ADVERTISE {
            then {
                community add PTT-SP-NO_ADVERTISE;
            }
        }
        term +1 {
            from community [ PTT-SP+1 PTT+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PTT-SP+2 PTT+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PTT-SP+3 PTT+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement BGP-PTT-SP-in {
        term RPKI-CHECK {
            from policy RPKI-CHECK;
        }
        term FILTRO-REJECT-in {
            from policy FILTRO-REJECT-in;
            then reject;
        }
        term AS-CLIENTES {
            from as-path-group AS-CLIENTES;
            then reject;
        }
        term DENY_PTT_IN {
            from as-path-group DENY_PTT_IN;
            then reject;
        }
        term ACCEPT {
            then {
                local-preference 350;
                community add PREFIX-WAN-PTT;
                accept;
            }
        }
    }
    policy-statement BGP-PTT-SP-out {
        term BGP-PTT-FILTRO {
            from policy FILTRO-MED-out;
            then next term;
        }
        term FILTRO-PREFIX-SMALL {
            from policy FILTRO-PREFIX-SMALL;
            then reject;
        }
        term +0 {
            from community PTT-SP+0;
            then accept;
        }
        term NO_EXPORT {
            from community [ NO_EXPORT PTT-NO_EXPORT PTT-SP-NO_EXPORT ];
            then reject;
        }
        term PTT-SP-NO_ADVERTISE {
            then {
                community add PTT-SP-NO_ADVERTISE;
            }
        }
        term +1 {
            from community [ PTT-SP+1 PTT+1 ];
            then {
                as-path-prepend 263444;
                accept;
            }
        }
        term +2 {
            from community [ PTT-SP+2 PTT+2 ];
            then {
                as-path-prepend "263444 263444";
                accept;
            }
        }
        term +3 {
            from community [ PTT-SP+3 PTT+3 ];
            then {
                as-path-prepend "263444 263444 263444";
                accept;
            }
        }
        term PREFIX-CLIENT-IP {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term PREFIX-CLIENT-CONTEUDO {
            from community PREFIX-CLIENT-CONTEUDO;
            then accept;
        }
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement CLI_IP-FUTURANET {
        term V4 {
            from {
                prefix-list-filter CLI-FUTURANET-V4 orlonger;
            }
            to policy BGP-FILTRO-CLIENTE-IP-in;
            then {
                community add PTT-AICX-SP-NO_EXPORT;
                accept;
            }
        }
        term V6 {
            from {
                prefix-list-filter CLI-FUTURANET-V6 orlonger;
            }
            to policy BGP-FILTRO-CLIENTE-IP-in;
            then {
                community add PTT-AICX-SP-NO_EXPORT;
                accept;
            }
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement CLI_IP-VIAFIBRA {
        term V4 {
            from {
                prefix-list-filter CLI-VIAFIBRA-V4 orlonger;
            }
            to policy BGP-FILTRO-CLIENTE-IP-in;
            then {
                community add NO_EXPORT;
                community add IP-COGENT+0;
                community add IP-DECIX+0;
                community add IP-VIVO+0;
                accept;
            }
        }
        term V6 {
            from {
                prefix-list-filter CLI-VIAFIBRA-V6 orlonger;
            }
            to policy BGP-FILTRO-CLIENTE-IP-in;
            then {
                community add NO_EXPORT;
                community add IP-COGENT+0;
                community add IP-DECIX+0;
                community add IP-VIVO+0;
                accept;
            }
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement CLI_IP-WCM {
        term V4 {
            from {
                prefix-list-filter CLI-WCM-V4 orlonger;
            }
            to policy BGP-FILTRO-CLIENTE-IP-in;
            then accept;
        }
        term V6 {
            from {
                prefix-list-filter CLI-WCM-V6 orlonger;
            }
            to policy BGP-FILTRO-CLIENTE-IP-in;
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement DEFAULT {
        term V4 {
            from {
                route-filter 0.0.0.0/0 exact;
            }
            then accept;
        }
        term V6 {
            from {
                route-filter ::/0 exact;
            }
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement FILTRO-BLACKHOLE {
        term BLACKHOLE {
            from {
                community BLACKHOLE;
                policy FILTRO-PREFIX-HOST;
            }
            then {
                local-preference 666;
                next-hop discard;
                accept;
            }
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement FILTRO-CLOUDFARE {
        term REJECT-PICADOS {
            from {
                route-filter 104.16.0.0/12 prefix-length-range /20-/20;
            }
            then accept;
        }
        then reject;
    }
    policy-statement FILTRO-MED-out {
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then reject;
        }
        term ORIGIN-THIS-ROUTER {
            from community PREFIX-ORIGIN-THIS-ROUTER;
            then {
                metric add 5;
                accept;
            }
        }
        term ORIGIN-THIS-POP {
            from community PREFIX-ORIGIN-THIS-POP;
            then {
                metric add 15;
                accept;
            }
        }
        term ORIGIN-ALT {
            from community PREFIX-ORIGIN-ALT;
            then {
                metric add 35;
                accept;
            }
        }
        term ORIGIN-BKP {
            from community PREFIX-ORIGIN-BKP;
            then {
                metric add 55;
                accept;
            }
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement FILTRO-PREFIX-HOST {
        term PREFIX-HOST-V4 {
            from {
                route-filter 0.0.0.0/0 upto /31 reject;
            }
            then reject;
        }
        term PREFIX-HOST-V6 {
            from {
                route-filter ::/0 upto /127 reject;
            }
            then reject;
        }
        term ACCEPT {
            then accept;
        }
    }
    policy-statement FILTRO-PREFIX-SMALL {
        term PREFIX-SMALL-V4 {
            from {
                route-filter 0.0.0.0/0 prefix-length-range /25-/32;
            }
            then accept;
        }
        term PREFIX-SMALL-V6 {
            from {
                route-filter ::/0 prefix-length-range /49-/128;
            }
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement FILTRO-REJECT-in {
        term MEUS-PREFIXOS {
            from policy MEUS-PREFIXOS;
            then accept;
        }
        term BOGONS {
            from {
                route-filter-list BOGONS;
            }
            then accept;
        }
        term BOGONS-ASN {
            from as-path-group BOGON-ASN;
            then accept;
        }
        term RPKI-DROP {
            from validation-database invalid;
            then accept;
        }
        term ACCEPT {
            then {
                community delete BLACKLIST_GERAL;
                reject;
            }
        }
    }
    policy-statement IBGP-IP-OUT {
        term ROTAS-CLI-LOCAL {
            from community PREFIX-ORIGIN-THIS-ROUTER;
            then {
                next-hop self;
                accept;
            }
        }
        term ROTAS-CLI {
            from community PREFIX-CLIENT-IP;
            then accept;
        }
        term IMPROVED {
            from community PREFIX-IMPROVED;
            then accept;
        }
        term VIP {
            from community PREFIX-VIP;
            then accept;
        }
        inactive: term REJECT {
            then reject;
        }
    }
    policy-statement IBGP-RPKI-CHECK {
        term VALID {
            from {
                protocol bgp;
                community origin-validation-state-valid;
            }
            then validation-state valid;
        }
        term INVALID {
            from {
                protocol bgp;
                community origin-validation-state-invalid;
            }
            then validation-state invalid;
        }
        term UNKNOWN {
            from {
                protocol bgp;
                community origin-validation-state-unknown;
            }
            then validation-state unknown;
        }
    }
    policy-statement IBGP-in {
        term MEUS-PREFIXOS {
            from policy MEUS-PREFIXOS;
            then accept;
        }
        term RPKI-CHECK {
            from policy IBGP-RPKI-CHECK;
        }
        term DIVERT {
            from community DIVERT;
            then accept;
        }
        term BLACKHOLE {
            from community BLACKHOLE;
            then {
                next-hop discard;
                accept;
            }
        }
        term RPKI-DROP {
            from validation-database invalid;
            then reject;
        }
        term ACCEPT {
            then accept;
        }
    }
    policy-statement KENTIK-OUT {
        term DEFAULT {
            from policy DEFAULT;
            then reject;
        }
        term ACCEPT {
            then accept;
        }
    }
    policy-statement MEUS-PREFIXOS {
        term 177.91.160.0/22 {
            from {
                route-filter 177.91.160.0/22 upto /32;
            }
            then accept;
        }
        term 138.36.164.0/22 {
            from {
                route-filter 138.36.164.0/22 upto /32;
            }
            then accept;
        }
        term 2804:11dc::/32 {
            from {
                route-filter 2804:11dc::/32 upto /128;
            }
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement OSPF-out {
        term PREFIX-ASN {
            from community PREFIX-ASN;
            then reject;
        }
        term STATIC {
            from protocol static;
            then accept;
        }
        term CONNECTED {
            from protocol [ direct local ];
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement RI-CONTEUDO {
        term PREFIX-CLIENT-IP {
            from {
                instance master;
                community PREFIX-CLIENT-IP;
            }
            then accept;
        }
        term PREFIX-ASN {
            from {
                instance master;
                community PREFIX-ASN;
            }
            then accept;
        }
        term DIRECT_MASTER {
            from {
                instance master;
                protocol [ direct local static ];
            }
            then accept;
        }
        term OSPF_MASTER {
            from {
                instance master;
                protocol ospf;
            }
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement RI-MASTER {
        term CONTEUDO_DEFAULT_REJECT {
            from {
                instance CONTEUDO;
                policy DEFAULT;
            }
            then reject;
        }
        term CONTEUDO {
            from {
                instance CONTEUDO;
                protocol [ direct local static ];
            }
            then accept;
        }
        term REJECT {
            then reject;
        }
    }
    policy-statement RPKI-CHECK {
        term VALID {
            from {
                protocol bgp;
                validation-database valid;
            }
            then {
                validation-state valid;
                community add origin-validation-state-valid;
            }
        }
        term INVALID {
            from {
                protocol bgp;
                validation-database invalid;
            }
            then {
                validation-state invalid;
                community add origin-validation-state-invalid;
            }
        }
        term UNKNOWN {
            from {
                protocol bgp;
                validation-database unknown;
            }
            then {
                validation-state unknown;
                community add origin-validation-state-unknown;
            }
        }
    }
    policy-statement flowspec-in {
        term accept-all {
            then accept;
        }
    }
    policy-statement lb {
        then {
            load-balance per-packet;
        }
    }
    policy-statement nhself {
        then {
            next-hop self;
        }
    }
    community BLACKHOLE members 65444:666;
    community BLACKLIST_GERAL members "65444:[0-9]+";
    community BLACKLIST_SPO1 members [ 65444:5000 65444:0 65444:1 "65444:2[0-9][0-9][0-9]" ];
    community CDN+0 members 65444:8990;
    community CDN+1 members 65444:8991;
    community CDN+2 members 65444:8992;
    community CDN+3 members 65444:8993;
    community CDNSTAR-NO_ADVERTISE members [ 65000:62017 65000:62018 65000:62023 65000:62030 65000:62036 65000:62037 target:65000:32475 ];
    community Cymru-in members 65332:888;
    community DDOS-DURAND members 65444:2058;
    community DIVERT members 65444:665;
    community IP+0 members 65444:2990;
    community IP+1 members 65444:2991;
    community IP+2 members 65444:2992;
    community IP+3 members 65444:2993;
    community IP-CDNSTAR+0 members 65444:2890;
    community IP-CDNSTAR+1 members 65444:2891;
    community IP-CDNSTAR+2 members 65444:2892;
    community IP-CDNSTAR+3 members 65444:3896;
    community IP-CDNSTAR-ALGAR_INT-NO_EXPORT members 16735:900;
    community IP-CDNSTAR-NO_EXPORT members 65444:2899;
    community IP-COGENT+0 members 65444:2090;
    community IP-COGENT+1 members 65444:2091;
    community IP-COGENT+2 members 65444:2092;
    community IP-COGENT+3 members 65444:2093;
    community IP-COGENT-BLACKHOLE members 2914:666;
    community IP-COGENT-HIGHPREF members 174:140;
    community IP-COGENT-NO_EXPORT members 65444:2099;
    community IP-DE-CIX-NO_EXPORT members 65444:2509;
    community IP-DECIX+0 members 65444:2500;
    community IP-DECIX+1 members 65444:2501;
    community IP-DECIX+2 members 65444:2502;
    community IP-DECIX+3 members 65444:2503;
    community IP-DECIX-BLACKHOLE members 65535:666;
    community IP-DECIX-NO_EXPORT members 65444:2509;
    community IP-DURAND+0 members 65444:2050;
    community IP-DURAND+1 members 65444:2051;
    community IP-DURAND+2 members 65444:2052;
    community IP-DURAND+3 members 65444:2053;
    community IP-DURAND-BLACKHOLE members 22356:666;
    community IP-DURAND-FROM_4230 members 22356:4230;
    community IP-DURAND-IGNORE-in members 3:32700;
    community IP-DURAND-NO_ALGAR members 22356:50735;
    community IP-DURAND-NO_EDGEUNO_COGENT members [ 64055:174 64001:174 ];
    community IP-DURAND-NO_EMBRATEL members 0:4230;
    community IP-DURAND-NO_EXPORT members 65444:2059;
    community IP-DURAND-NO_PTT members [ 22356:65521 28663:65521 ];
    community IP-DURAND-SEMPRE members 65444:2055;
    community IP-FLYS+0 members 65444:2080;
    community IP-FLYS+1 members 65444:2081;
    community IP-FLYS+2 members 65444:2082;
    community IP-FLYS+3 members 65444:2083;
    community IP-FLYS-NO_EXPORT members 65444:2089;
    community IP-GLOBENET+0 members 65444:2070;
    community IP-GLOBENET+1 members 65444:2071;
    community IP-GLOBENET+2 members 65444:2072;
    community IP-GLOBENET+3 members 65444:2073;
    community IP-GLOBENET-BLACKHOLE members 52320:666;
    community IP-GLOBENET-NO_ALGAR members 65006:622;
    community IP-GLOBENET-NO_EXPORT members 65444:2079;
    community IP-GLOBENET-NO_PTT members 65006:6120;
    community IP-LEVEL3+0 members 65444:2060;
    community IP-LEVEL3+6 members 65444:2066;
    community IP-LEVEL3-FREEFIRE members 65444:2068;
    community IP-LEVEL3-NO_EXPORT members 65444:2069;
    community IP-NO_EXPORT members 65444:2999;
    community IP-NYIIX+0 members 65444:2800;
    community IP-NYIIX+1 members 65444:2801;
    community IP-NYIIX+2 members 65444:2802;
    community IP-NYIIX+3 members 65444:2803;
    community IP-NYIIX-NO_ADVERTISE members 0:6939;
    community IP-NYIIX-NO_EXPORT members 65444:2809;
    community IP-PEER1+0 members 65444:2700;
    community IP-PEER1+1 members 65444:2701;
    community IP-PEER1+2 members 65444:2702;
    community IP-PEER1+3 members 65444:2703;
    community IP-PEER1-AKAMAI-NO_EXPORT members [ 20940:3019 20940:3029 ];
    community IP-PEER1-BLACKHOLE members 1031:666;
    community IP-PEER1-GLOBO-NO_EXPORT members [ 28604:3019 28604:3029 ];
    community IP-PEER1-NO_ADVERTISE members [ 28604:3019 28604:3029 20940:3019 20940:3029 16509:3029 16509:3019 20940:3139 396986L:3019 396986L:3029 8075:3019 8075:3029 6085:3019 6085:3029 272786L:3019 272786L:3029 21859:3019 21859:3029 23344:3019 23344:3029 23344:1019 26506:3019 26506:3029 23059:3019 23059:3029 20253:3019 20253:3029 ];
    community IP-PEER1-NO_EXPORT members 65444:2709;
    community IP-SPARKLE+0 members 65444:2040;
    community IP-SPARKLE+1 members 65444:2041;
    community IP-SPARKLE+2 members 65444:2044;
    community IP-SPARKLE+3 members 65444:2043;
    community IP-SPARKLE-BLACKHOLE members 6762:666;
    community IP-SPARKLE-NO_EXPORT members 65444:2049;
    community IP-VIVO+0 members 65444:2100;
    community IP-VIVO+1 members 65444:2101;
    community IP-VIVO+2 members 65444:2102;
    community IP-VIVO+3 members 65444:2103;
    community IP-VIVO-BLACKHOLE members 2914:666;
    community IP-VIVO-NO_EXPORT members 65444:2109;
    community IP-VIVO-PTT_SP_VALIDO members target:26162:65111;
    community IP-VIVO-SO_VIVO members [ 10429:113 10429:131 ];
    community NO_EXPORT members 65444:9999;
    community PEER+0 members 65444:4990;
    community PEER+1 members 65444:4991;
    community PEER+2 members 65444:4992;
    community PEER+3 members 65444:4993;
    community PEER-AKAMAI+0 members 65444:4050;
    community PEER-AKAMAI+1 members 65444:4051;
    community PEER-AKAMAI+2 members 65444:4052;
    community PEER-AKAMAI+3 members 65444:4053;
    community PEER-AKAMAI-HIGH_PREFERENCE members 20189:385;
    community PEER-AKAMAI-NO_EXPORT members 65444:4059;
    community PEER-AKAMAI_in members 65444:2750;
    community PEER-ALT+0 members 65444:4510;
    community PEER-ALT+1 members 65444:4511;
    community PEER-ALT+2 members 65444:4512;
    community PEER-ALT+3 members 65444:4513;
    community PEER-ALT-NO_EXPORT members 65444:4519;
    community PEER-AMAZON+0 members 65444:4910;
    community PEER-AMAZON+1 members 65444:4911;
    community PEER-AMAZON+2 members 65444:4912;
    community PEER-AMAZON+3 members 65444:4913;
    community PEER-AMAZON-NO_EXPORT members 65444:4919;
    community PEER-ATC+0 members 65444:4150;
    community PEER-ATC+1 members 65444:4151;
    community PEER-ATC+2 members 65444:4152;
    community PEER-ATC+3 members 65444:4153;
    community PEER-ATC-NO_EXPORT members 65444:4159;
    community PEER-CDN77+0 members 65444:4730;
    community PEER-CDN77+1 members 65444:4731;
    community PEER-CDN77+2 members 65444:4732;
    community PEER-CDN77+3 members 65444:4733;
    community PEER-CDN77-NO_EXPORT members 65444:4739;
    community PEER-CDNTV+0 members 65444:4880;
    community PEER-CDNTV+1 members 65444:4881;
    community PEER-CDNTV+2 members 65444:4882;
    community PEER-CDNTV+3 members 65444:4883;
    community PEER-CDNTV-NO_EXPORT members 65444:4889;
    community PEER-CLARO+0 members 65444:4520;
    community PEER-CLARO+1 members 65444:4521;
    community PEER-CLARO+2 members 65444:4522;
    community PEER-CLARO+3 members 65444:4523;
    community PEER-CLARO-NO_EXPORT members 65444:4529;
    community PEER-CLOUDFARE+0 members 65444:4830;
    community PEER-CLOUDFARE+1 members 65444:4831;
    community PEER-CLOUDFARE+2 members 65444:4832;
    community PEER-CLOUDFARE+3 members 65444:4833;
    community PEER-CLOUDFARE-NO_EXPORT members 65444:4839;
    community PEER-DISNEY+0 members 65444:4860;
    community PEER-DISNEY+1 members 65444:4861;
    community PEER-DISNEY+2 members 65444:4862;
    community PEER-DISNEY+3 members 65444:4863;
    community PEER-DISNEY-NO_EXPORT members 65444:4869;
    community PEER-EDGEUNO+0 members 65444:4070;
    community PEER-EDGEUNO+1 members 65444:4071;
    community PEER-EDGEUNO+2 members 65444:4072;
    community PEER-EDGEUNO+3 members 65444:4073;
    community PEER-EDGEUNO-NO_EXPORT members 65444:4079;
    community PEER-FACEBOOK+0 members 65444:4030;
    community PEER-FACEBOOK+1 members 65444:4031;
    community PEER-FACEBOOK+2 members 65444:4032;
    community PEER-FACEBOOK+3 members 65444:4033;
    community PEER-FACEBOOK-NO_EXPORT members 65444:4039;
    community PEER-FACEBOOK-PREF_HIGH members 32934:10011;
    community PEER-FACEBOOK-PREF_HIGHEST members 32934:10012;
    community PEER-FASTLY+0 members 65444:4870;
    community PEER-FASTLY+1 members 65444:4871;
    community PEER-FASTLY+2 members 65444:4872;
    community PEER-FASTLY+3 members 65444:4873;
    community PEER-FASTLY-NO_EXPORT members 65444:4879;
    community PEER-FDCSERVERS+0 members 65444:4850;
    community PEER-FDCSERVERS+1 members 65444:4851;
    community PEER-FDCSERVERS+2 members 65444:4852;
    community PEER-FDCSERVERS+3 members 65444:4853;
    community PEER-FDCSERVERS-NO_EXPORT members 65444:4859;
    community PEER-GLOBO+0 members 65444:4920;
    community PEER-GLOBO+1 members 65444:4921;
    community PEER-GLOBO+2 members 65444:4922;
    community PEER-GLOBO+3 members 65444:4923;
    community PEER-GLOBO-NO_EXPORT members 65444:4929;
    community PEER-GOOGLE+0 members 65444:4020;
    community PEER-GOOGLE+1 members 65444:4021;
    community PEER-GOOGLE+2 members 65444:4022;
    community PEER-GOOGLE+3 members 65444:4023;
    community PEER-GOOGLE-NO_EXPORT members 65444:4029;
    community PEER-MAXIHOST+0 members 65444:4680;
    community PEER-MAXIHOST+1 members 65444:4681;
    community PEER-MAXIHOST+2 members 65444:4682;
    community PEER-MAXIHOST+3 members 65444:4683;
    community PEER-MAXIHOST-NO_EXPORT members 65444:4689;
    community PEER-NO_EXPORT members 65444:4999;
    community PEER-X99+0 members 65444:4900;
    community PEER-X99+1 members 65444:4901;
    community PEER-X99+2 members 65444:4902;
    community PEER-X99+3 members 65444:4903;
    community PEER-X99-NO_EXPORT members 65444:4909;
    community PEER-ZENLAYER+0 members 65444:4840;
    community PEER-ZENLAYER+1 members 65444:4841;
    community PEER-ZENLAYER+2 members 65444:4844;
    community PEER-ZENLAYER+3 members 65444:4843;
    community PEER-ZENLAYER-NO_EXPORT members 65444:4849;
    community PREFIX-ASN members 65444:10000;
    community PREFIX-CLIENT-CONTEUDO members 65444:6000;
    community PREFIX-CLIENT-DDOS members 65444:9000;
    community PREFIX-CLIENT-IP members 65444:5000;
    community PREFIX-CLIENT-IP-CLI members 65444:5001;
    community PREFIX-CLIENT-IP-CLI-CLI members 65444:5002;
    community PREFIX-DDOS members 65444:9000;
    community PREFIX-IMPROVED members "65444:2000[0-9]";
    community PREFIX-ORIGIN-ALT members "65444:165[0-9]";
    community PREFIX-ORIGIN-BKP members "65444:160[0-9]|65444:162[0-9]|65444:164[0-9]";
    community PREFIX-ORIGIN-SP2 members 65444:1650;
    community PREFIX-ORIGIN-SP4 members "65444:164[0-9]";
    community PREFIX-ORIGIN-THIS-POP members "65444:165[0-9]";
    community PREFIX-ORIGIN-THIS-ROUTER members 65444:1654;
    community PREFIX-PARCIAL members 65444:1000;
    community PREFIX-PEER members 65444:4000;
    community PREFIX-PTT members 65444:3000;
    community PREFIX-VIP members 65444:30000;
    community PREFIX-WAN-IP members 65444:2000;
    community PREFIX-WAN-PEER members 65444:4000;
    community PREFIX-WAN-PTT members 65444:3000;
    community PTT+0 members 65444:3990;
    community PTT+1 members 65444:3991;
    community PTT+2 members 65444:3992;
    community PTT+3 members 65444:3993;
    community PTT-AICX-SP+0 members 65444:3260;
    community PTT-AICX-SP+1 members 65444:3261;
    community PTT-AICX-SP+2 members 65444:3262;
    community PTT-AICX-SP+3 members 65444:3263;
    community PTT-AICX-SP-NO_ADVERTISE members 0:6939;
    community PTT-AICX-SP-NO_EXPORT members 65444:3269;
    community PTT-CE-NO_EXPORT members 65444:3069;
    community PTT-EQX-SP+0 members 65444:3250;
    community PTT-EQX-SP+1 members 65444:3251;
    community PTT-EQX-SP+2 members 65444:3252;
    community PTT-EQX-SP+3 members 65444:3253;
    community PTT-EQX-SP-NO_ADVERTISE members [ 0:6939 24115:24115 ];
    community PTT-EQX-SP-NO_EXPORT members 65444:3259;
    community PTT-GLOBO-NO_EXPORT members 65000:28604;
    community PTT-NO_EXPORT members 65444:3999;
    community PTT-SP+0 members 65444:3010;
    community PTT-SP+1 members 65444:3011;
    community PTT-SP+2 members 65444:3012;
    community PTT-SP+3 members 65444:3013;
    community PTT-SP-AMAZON-NO_EXPORT members 65000:16509;
    community PTT-SP-CDNTV-NO_EXPORT members target:65000:268843;
    community PTT-SP-NO_ADVERTISE members [ 65000:6939 65000:32934 65000:6507 65000:25933 65000:57463 65000:20940 ];
    community PTT-SP-NO_EXPORT members 65444:3019;
    community PTT_NO_ADVERTISE members [ 65000:6939 65000:16509 65000:20940 65000:32787 65000:31898 ];
    community RPKI-INVALID members 65444:101;
    community RPKI-UNKNOWN members 65444:102;
    community RPKI-VALID members 65444:100;
    community SPARKLE_EBT+1 members 6762:20170;
    community SPARKLE_EBT+2 members 6762:20270;
    community SPARKLE_EBT+3 members 6762:20370;
    community SPARKLE_LEVEL3+3 members [ 6762:20315 6762:20309 ];
    community UTRS-BLACKHOLE members 64496:0;
    community UTRS-OPENX members target:263444L:0;
    community no-export members no-export;
    community origin-validation-state-invalid members 0x4300:0.0.0.0:2;
    community origin-validation-state-unknown members 0x4300:0.0.0.0:1;
    community origin-validation-state-valid members 0x4300:0.0.0.0:0;
    as-path-match {
        memory-limit 16m;
    }
    community-match {
        memory-limit 16m;
    }
    as-path-group BOGON-ASN {
        as-path zero ".* 0 .*";
        as-path as_trans ".* 23456 .*";
        as-path examples1 ".* [64496-64511] .*";
        as-path examples2 ".* [65536-65551] .*";
        as-path reserved1 ".* [64512-65534] .*";
        as-path reserved2 ".* [4200000000-4294967294] .*";
        as-path last16 ".* 65535 .*";
        as-path last32 ".* 4294967295 .*";
        as-path iana-reserved ".* [65552-131071] .*";
    }
    as-path-group AS-DURAND-BUGADO {
        as-path AS32281 ".* (32281|32281 .+)";
        as-path AS16735 ".* (16735|16735 .+)";
        as-path AS21859 ".* (21859|21859 .+)";
        as-path AS17222 ".* (17222|17222 .+)";
        as-path AS16814 ".* (16814|16814 .+)";
        as-path AS10954 ".* (10954|10954 .+)";
    }
    as-path-group AS-DURAND {
        as-path DURAND "22356$";
    }
    as-path-group AS-DURAND-MELHORAR {
        as-path AS262485 ".* (262485|262485 .+)";
        as-path AS22548 ".+ (22548|22548 .+)";
        as-path AS16735 ".+ (16735|16735 .+)";
    }
    as-path-group AS-DURAND-PIORAR {
        as-path NTT ".+ 2914";
        as-path AS264583 ".+ 264583";
        as-path AS23106 ".* (23106|23106 .+)";
        as-path AS28658 ".* (28658|28658 .+)";
        as-path AS21859 ".* (21859|21859 .+)";
        as-path AS20473 ".* (20473|20473.+)";
        as-path AS16509 ".* (16509|16509 .+)";
        as-path AS16276 ".* (16276|16276 .+)";
        as-path AS60068 ".* (60068|60068 .+)";
        as-path AS16814 ".* (16814|16814 .+)";
        as-path AS271354 ".* (271354|271354 .+)";
    }
    as-path-group AS-COGENT {
        as-path COGENT "174$";
    }
    as-path-group AS-COGENT-MELHORAR {
        as-path AS32354 ".* (32354|32354 .+)";
    }
    as-path-group AS-COGENT-PIORAR {
        as-path ALGAR ".* (16735|16735 .+)";
        as-path EMBRATEL ".* (4230|4230 .+)";
        as-path RNP ".* (1916|1916 +)";
        as-path LOCAWEB ".* (27715|27715 .+)";
        as-path AS14117 ".* (14117|14117 .+)";
        as-path AS52950 ".* (52950|52950 .+)";
        as-path 53334 ".* (53334|53334 .+)";
        as-path AS14618 ".* (14618|14618.+)";
    }
    as-path-group DENY_SPARKLE-IN {
        as-path AS262654 ".* (262654|262654 .+)";
        as-path AS53222 ".* (53222|53222 .+)";
    }
    as-path-group AS-SPARKLE-PIORAR {
        as-path NTT 2914;
        as-path AS262470 ".+ (262470|262470 .+)";
        as-path AS262462 ".+ (262462|262462 .+)";
        as-path AS7162 ".+ (7162|7162 .+)";
        as-path EMBRATEL ".* (4230|4230 .+)";
        as-path AS27715 ".* (27715|27715 .+)";
        as-path AS60068 ".+ (60068|60068 .+)";
    }
    as-path-group AS-SPARKLE {
        as-path SPARKLE "6762$";
    }
    as-path-group AS-SPARKLE-MELHORAR {
        as-path XXX ".+ 123";
        as-path AS46475 ".+ (46475|46475 .+)";
        as-path AS28753 ". + 28753";
        as-path AS49981 ".* (49981|49981 .+)";
        as-path AS174 ".+ 174";
        as-path AS20473 ".+ 20473";
        as-path AS60781 ".* (60781|60781 .+)";
        as-path AS54113 ".* (54113|54113 .+)";
        as-path AS270668 ".* (270668|270668 .+)";
        as-path AS28210 ".* (28210|28210 .+)";
        as-path AS6939 ".+ 6939";
        as-path AS8075 ".* (8075|8075 .+)";
        as-path AS53055 ".+ (53055|53055 .+)";
        as-path AS199524 ".* (199524|199524 .+)";
        as-path AS202422 ".* (202422|202422 .+)";
        as-path AS31898 ".* (31898|31898 .+)";
        as-path AS10954 ".+ (10954|10954 .+)";
        as-path AS16735 ".+ (16735|16735 .+)";
        as-path AS15169 ".+ (15169|15169 .+)";
    }
    as-path-group AS-ALT-MELHORAR {
        as-path ALT ".+ 53062";
    }
    as-path-group AS-ALT-PIORAR {
        as-path ALT ".+ 123456";
    }
    as-path-group AS-ALT {
        as-path ALT "53062$";
    }
    as-path-group DENY_VIVO_IN {
        as-path AS16735 ".* (16735|16735 .+)";
        as-path AS123 ".* (123|123 .+)";
    }
    as-path-group AS-CARAJAS-PA {
        as-path AS52878 ".* (52878|52878. +)";
        as-path AS28246 ".* (28246|28246. +)";
    }
    as-path-group AS-VIVO {
        as-path VIVO "10429$";
        as-path 26599 ".+ 26599$";
        as-path GVT "18881$";
    }
    as-path-group AS-VIVO-PIORAR {
        as-path EMBRATEL ".* (4230|4230 .+)";
    }
    as-path-group AS-VIVO-MELHORAR {
        as-path XXX ".+ 123";
        as-path AS136897 ".* (136897|136897 .+)";
        as-path AS20473 ".* (20473|20473 .+)";
        as-path AS27699 ".* (27699|27669 .+)";
        as-path AS138341 ".* (138341|138341 .+)";
        as-path AS52878 ".* (52878|52878. +)";
    }
    as-path-group AS-GLOBENET {
        as-path GLOBENET "52320$";
    }
    as-path-group AS-GLOBENET-MELHORAR {
        as-path GLOBENET ".+ 52320";
    }
    as-path-group AS-GLOBENET-PIORAR {
        as-path NTT 2914;
        as-path AS14061 ".+ 14061";
        as-path 52993 ".+ 52993";
        as-path 54113 ".+ 54113";
        as-path AS6939 ".+ 6939";
    }
    as-path-group BRADESCO {
        as-path AS28586 ".* (28586|28586 .+)";
    }
    as-path-group BB {
        as-path AS11993 ".* (11993|11993 .+)";
    }
    as-path-group AS-CLOUDFARE {
        as-path CLOUDFARE "13335$";
    }
    as-path-group AS-AMAZON-MELHORAR {
        as-path AMAZON ".+ 12345";
    }
    as-path-group AS-AMAZON-PIORAR {
        as-path AMAZON ".+ 12345";
    }
    as-path-group AS-AMAZON {
        as-path AMAZON "16509$";
    }
    as-path-group DENY_PTT_IN {
        as-path SERPRO ".* (10954|10954 .+)";
        as-path ALOG ".* (16397|16397 .+)";
        as-path GVT ".* (18881|18881 .+)";
        as-path NETIX ".* (57463|57463 .+)";
        as-path GLOBENET ".* (52320|52320 .+)";
        as-path MANDIC ".* (262545|262545 .+)";
        as-path GCORE ".* (199524|199524 .+)";
        as-path RIOT ".* (6507|6507 .+)";
        as-path HE ".* (6939|6939 .+)";
        as-path BRFIBRA ".* (14840|14840 .+)";
        as-path ASCENTY ".* (52925|52925 .+)";
        as-path CEF ".* (20116|20116 .+)";
        as-path GLOBO ".* (28604|28604 .+)";
        as-path AMAZON ".* (16509|16509 .+)";
    }
    as-path-group AS-PEER1 {
        as-path PEER1 "1031$";
    }
    as-path-group AS-PEER1-MELHORAR {
        as-path PEER1 "1031$";
        as-path AS14618 ".* (14618|14618. +)";
    }
    as-path-group AS-PEER1-PIORAR {
        as-path PEER1 "123456$";
        as-path ALGAR ".* (16735|16735.+)";
        as-path AS264096 ".* (264096|264096.+)";
        as-path AS14618 ".* (14618|14618 .+)";
    }
    as-path-group PEER1-NO-IMPORT {
        as-path AS46652 ".* (46652|46652 .+)";
    }
    as-path-group DENY_PEER_IN {
        as-path SGP ".* (270967|270967 .+)";
    }
    as-path-group AS-PTT+WAN_PEER {
        as-path AS264013 ".* (264013|264013 .+)";
        as-path AS6507 ".* (6507|6507 .+)";
    }
    as-path-group AS-GLOBO-PIORAR {
        as-path GLOBO ".+ 125";
    }
    as-path-group AS-GLOBO {
        as-path GLOBO "28604$";
    }
    as-path-group AS-GLOBO-MELHORAR {
        as-path GLOBO ".+ 28604";
    }
    as-path-group PEER1-NO_IMPORT {
        as-path AS46652 ".* (46652|46652 .+)";
    }
    as-path-group AS-CDNSTAR-MELHORAR {
        as-path CDNSTAR ".+ 272713";
    }
    as-path-group AS-CDNSTAR-PIORAR {
        as-path CDNSTAR ".+ 264096";
    }
    as-path-group AS-CDNSTAR {
        as-path CDNSTAR "272713$";
    }
    as-path-group AS-CLIENTES {
        as-path AS11835 ".* (11835|11835 .+)";
        as-path AS13335 ".* (13335|13335 .+)";
        as-path AS13357 ".* (13357|13357 .+)";
        as-path AS1916 ".* (1916|1916 .+)";
        as-path AS19318 ".* (19318|19318 .+)";
        as-path AS20255 ".* (20255|20255 .+)";
        as-path AS21574 ".* (21574|21574 .+)";
        as-path AS21741 ".* (21741|21741 .+)";
        as-path AS22080 ".* (22080|22080 .+)";
        as-path AS22177 ".* (22177|22177 .+)";
        as-path AS22381 ".* (22381|22381 .+)";
        as-path AS22431 ".* (22431|22431 .+)";
        as-path AS23201 ".* (23201|23201 .+)";
        as-path AS262183 ".* (262183|262183 .+)";
        as-path AS262196 ".* (262196|262196 .+)";
        as-path AS262200 ".* (262200|262200 .+)";
        as-path AS262250 ".* (262250|262250 .+)";
        as-path AS262273 ".* (262273|262273 .+)";
        as-path AS262280 ".* (262280|262280 .+)";
        as-path AS262282 ".* (262282|262282 .+)";
        as-path AS262288 ".* (262288|262288 .+)";
        as-path AS262292 ".* (262292|262292 .+)";
        as-path AS262304 ".* (262304|262304 .+)";
        as-path AS262316 ".* (262316|262316 .+)";
        as-path AS262317 ".* (262317|262317 .+)";
        as-path AS262331 ".* (262331|262331 .+)";
        as-path AS262342 ".* (262342|262342 .+)";
        as-path AS262343 ".* (262343|262343 .+)";
        as-path AS262351 ".* (262351|262351 .+)";
        as-path AS262352 ".* (262352|262352 .+)";
        as-path AS262353 ".* (262353|262353 .+)";
        as-path AS262364 ".* (262364|262364 .+)";
        as-path AS262379 ".* (262379|262379 .+)";
        as-path AS262382 ".* (262382|262382 .+)";
        as-path AS262398 ".* (262398|262398 .+)";
        as-path AS262404 ".* (262404|262404 .+)";
        as-path AS262406 ".* (262406|262406 .+)";
        as-path AS262408 ".* (262408|262408 .+)";
        as-path AS262417 ".* (262417|262417 .+)";
        as-path AS262422 ".* (262422|262422 .+)";
        as-path AS262423 ".* (262423|262423 .+)";
        as-path AS262427 ".* (262427|262427 .+)";
        as-path AS262452 ".* (262452|262452 .+)";
        as-path AS262453 ".* (262453|262453 .+)";
        as-path AS262456 ".* (262456|262456 .+)";
        as-path AS262462 ".* (262462|262462 .+)";
        as-path AS262469 ".* (262469|262469 .+)";
        as-path AS262483 ".* (262483|262483 .+)";
        as-path AS262484 ".* (262484|262484 .+)";
        as-path AS262487 ".* (262487|262487 .+)";
        as-path AS262490 ".* (262490|262490 .+)";
        as-path AS262493 ".* (262493|262493 .+)";
        as-path AS262496 ".* (262496|262496 .+)";
        as-path AS262505 ".* (262505|262505 .+)";
        as-path AS262514 ".* (262514|262514 .+)";
        as-path AS262518 ".* (262518|262518 .+)";
        as-path AS262520 ".* (262520|262520 .+)";
        as-path AS262535 ".* (262535|262535 .+)";
        as-path AS262540 ".* (262540|262540 .+)";
        as-path AS262541 ".* (262541|262541 .+)";
        as-path AS262569 ".* (262569|262569 .+)";
        as-path AS262576 ".* (262576|262576 .+)";
        as-path AS262579 ".* (262579|262579 .+)";
        as-path AS262581 ".* (262581|262581 .+)";
        as-path AS262588 ".* (262588|262588 .+)";
        as-path AS262607 ".* (262607|262607 .+)";
        as-path AS262612 ".* (262612|262612 .+)";
        as-path AS262638 ".* (262638|262638 .+)";
        as-path AS262641 ".* (262641|262641 .+)";
        as-path AS262644 ".* (262644|262644 .+)";
        as-path AS262649 ".* (262649|262649 .+)";
        as-path AS262657 ".* (262657|262657 .+)";
        as-path AS262663 ".* (262663|262663 .+)";
        as-path AS262684 ".* (262684|262684 .+)";
        as-path AS262693 ".* (262693|262693 .+)";
        as-path AS262699 ".* (262699|262699 .+)";
        as-path AS262702 ".* (262702|262702 .+)";
        as-path AS262711 ".* (262711|262711 .+)";
        as-path AS262721 ".* (262721|262721 .+)";
        as-path AS262722 ".* (262722|262722 .+)";
        as-path AS262725 ".* (262725|262725 .+)";
        as-path AS262727 ".* (262727|262727 .+)";
        as-path AS262738 ".* (262738|262738 .+)";
        as-path AS262743 ".* (262743|262743 .+)";
        as-path AS262744 ".* (262744|262744 .+)";
        as-path AS262755 ".* (262755|262755 .+)";
        as-path AS262756 ".* (262756|262756 .+)";
        as-path AS262758 ".* (262758|262758 .+)";
        as-path AS262761 ".* (262761|262761 .+)";
        as-path AS262770 ".* (262770|262770 .+)";
        as-path AS262777 ".* (262777|262777 .+)";
        as-path AS262783 ".* (262783|262783 .+)";
        as-path AS262793 ".* (262793|262793 .+)";
        as-path AS262818 ".* (262818|262818 .+)";
        as-path AS262828 ".* (262828|262828 .+)";
        as-path AS262841 ".* (262841|262841 .+)";
        as-path AS262861 ".* (262861|262861 .+)";
        as-path AS262866 ".* (262866|262866 .+)";
        as-path AS262873 ".* (262873|262873 .+)";
        as-path AS262880 ".* (262880|262880 .+)";
        as-path AS262895 ".* (262895|262895 .+)";
        as-path AS262909 ".* (262909|262909 .+)";
        as-path AS262911 ".* (262911|262911 .+)";
        as-path AS262940 ".* (262940|262940 .+)";
        as-path AS262961 ".* (262961|262961 .+)";
        as-path AS262962 ".* (262962|262962 .+)";
        as-path AS262972 ".* (262972|262972 .+)";
        as-path AS262975 ".* (262975|262975 .+)";
        as-path AS262986 ".* (262986|262986 .+)";
        as-path AS262989 ".* (262989|262989 .+)";
        as-path AS263011 ".* (263011|263011 .+)";
        as-path AS263026 ".* (263026|263026 .+)";
        as-path AS263027 ".* (263027|263027 .+)";
        as-path AS263028 ".* (263028|263028 .+)";
        as-path AS263040 ".* (263040|263040 .+)";
        as-path AS263046 ".* (263046|263046 .+)";
        as-path AS263049 ".* (263049|263049 .+)";
        as-path AS263059 ".* (263059|263059 .+)";
        as-path AS263062 ".* (263062|263062 .+)";
        as-path AS263069 ".* (263069|263069 .+)";
        as-path AS263075 ".* (263075|263075 .+)";
        as-path AS263083 ".* (263083|263083 .+)";
        as-path AS263084 ".* (263084|263084 .+)";
        as-path AS263104 ".* (263104|263104 .+)";
        as-path AS263105 ".* (263105|263105 .+)";
        as-path AS263124 ".* (263124|263124 .+)";
        as-path AS263131 ".* (263131|263131 .+)";
        as-path AS263135 ".* (263135|263135 .+)";
        as-path AS263143 ".* (263143|263143 .+)";
        as-path AS263169 ".* (263169|263169 .+)";
        as-path AS263192 ".* (263192|263192 .+)";
        as-path AS263255 ".* (263255|263255 .+)";
        as-path AS263256 ".* (263256|263256 .+)";
        as-path AS263266 ".* (263266|263266 .+)";
        as-path AS263270 ".* (263270|263270 .+)";
        as-path AS263290 ".* (263290|263290 .+)";
        as-path AS263294 ".* (263294|263294 .+)";
        as-path AS263299 ".* (263299|263299 .+)";
        as-path AS263303 ".* (263303|263303 .+)";
        as-path AS263304 ".* (263304|263304 .+)";
        as-path AS263309 ".* (263309|263309 .+)";
        as-path AS263320 ".* (263320|263320 .+)";
        as-path AS263335 ".* (263335|263335 .+)";
        as-path AS263336 ".* (263336|263336 .+)";
        as-path AS263342 ".* (263342|263342 .+)";
        as-path AS263343 ".* (263343|263343 .+)";
        as-path AS263345 ".* (263345|263345 .+)";
        as-path AS263349 ".* (263349|263349 .+)";
        as-path AS263370 ".* (263370|263370 .+)";
        as-path AS263374 ".* (263374|263374 .+)";
        as-path AS263389 ".* (263389|263389 .+)";
        as-path AS263401 ".* (263401|263401 .+)";
        as-path AS263412 ".* (263412|263412 .+)";
        as-path AS263419 ".* (263419|263419 .+)";
        as-path AS263425 ".* (263425|263425 .+)";
        as-path AS263435 ".* (263435|263435 .+)";
        as-path AS263444 ".* (263444|263444 .+)";
        as-path AS263451 ".* (263451|263451 .+)";
        as-path AS263457 ".* (263457|263457 .+)";
        as-path AS263459 ".* (263459|263459 .+)";
        as-path AS263469 ".* (263469|263469 .+)";
        as-path AS263470 ".* (263470|263470 .+)";
        as-path AS263489 ".* (263489|263489 .+)";
        as-path AS263493 ".* (263493|263493 .+)";
        as-path AS263495 ".* (263495|263495 .+)";
        as-path AS263516 ".* (263516|263516 .+)";
        as-path AS263532 ".* (263532|263532 .+)";
        as-path AS263535 ".* (263535|263535 .+)";
        as-path AS263536 ".* (263536|263536 .+)";
        as-path AS263537 ".* (263537|263537 .+)";
        as-path AS263541 ".* (263541|263541 .+)";
        as-path AS263558 ".* (263558|263558 .+)";
        as-path AS263567 ".* (263567|263567 .+)";
        as-path AS263571 ".* (263571|263571 .+)";
        as-path AS263578 ".* (263578|263578 .+)";
        as-path AS263589 ".* (263589|263589 .+)";
        as-path AS263600 ".* (263600|263600 .+)";
        as-path AS263601 ".* (263601|263601 .+)";
        as-path AS263608 ".* (263608|263608 .+)";
        as-path AS263614 ".* (263614|263614 .+)";
        as-path AS263623 ".* (263623|263623 .+)";
        as-path AS263625 ".* (263625|263625 .+)";
        as-path AS263626 ".* (263626|263626 .+)";
        as-path AS263627 ".* (263627|263627 .+)";
        as-path AS263641 ".* (263641|263641 .+)";
        as-path AS263643 ".* (263643|263643 .+)";
        as-path AS263651 ".* (263651|263651 .+)";
        as-path AS263668 ".* (263668|263668 .+)";
        as-path AS263672 ".* (263672|263672 .+)";
        as-path AS263674 ".* (263674|263674 .+)";
        as-path AS263676 ".* (263676|263676 .+)";
        as-path AS263727 ".* (263727|263727 .+)";
        as-path AS263732 ".* (263732|263732 .+)";
        as-path AS263737 ".* (263737|263737 .+)";
        as-path AS263750 ".* (263750|263750 .+)";
        as-path AS263801 ".* (263801|263801 .+)";
        as-path AS263813 ".* (263813|263813 .+)";
        as-path AS263837 ".* (263837|263837 .+)";
        as-path AS263859 ".* (263859|263859 .+)";
        as-path AS263878 ".* (263878|263878 .+)";
        as-path AS263896 ".* (263896|263896 .+)";
        as-path AS263913 ".* (263913|263913 .+)";
        as-path AS263920 ".* (263920|263920 .+)";
        as-path AS263924 ".* (263924|263924 .+)";
        as-path AS263929 ".* (263929|263929 .+)";
        as-path AS263935 ".* (263935|263935 .+)";
        as-path AS263936 ".* (263936|263936 .+)";
        as-path AS263940 ".* (263940|263940 .+)";
        as-path AS263944 ".* (263944|263944 .+)";
        as-path AS263952 ".* (263952|263952 .+)";
        as-path AS263971 ".* (263971|263971 .+)";
        as-path AS263974 ".* (263974|263974 .+)";
        as-path AS263978 ".* (263978|263978 .+)";
        as-path AS263980 ".* (263980|263980 .+)";
        as-path AS263983 ".* (263983|263983 .+)";
        as-path AS263995 ".* (263995|263995 .+)";
        as-path AS263997 ".* (263997|263997 .+)";
        as-path AS264000 ".* (264000|264000 .+)";
        as-path AS264001 ".* (264001|264001 .+)";
        as-path AS264005 ".* (264005|264005 .+)";
        as-path AS264022 ".* (264022|264022 .+)";
        as-path AS264031 ".* (264031|264031 .+)";
        as-path AS264043 ".* (264043|264043 .+)";
        as-path AS264048 ".* (264048|264048 .+)";
        as-path AS264053 ".* (264053|264053 .+)";
        as-path AS264070 ".* (264070|264070 .+)";
        as-path AS264092 ".* (264092|264092 .+)";
        as-path AS264106 ".* (264106|264106 .+)";
        as-path AS264127 ".* (264127|264127 .+)";
        as-path AS264128 ".* (264128|264128 .+)";
        as-path AS264129 ".* (264129|264129 .+)";
        as-path AS264135 ".* (264135|264135 .+)";
        as-path AS264146 ".* (264146|264146 .+)";
        as-path AS264147 ".* (264147|264147 .+)";
        as-path AS264155 ".* (264155|264155 .+)";
        as-path AS264158 ".* (264158|264158 .+)";
        as-path AS264178 ".* (264178|264178 .+)";
        as-path AS264180 ".* (264180|264180 .+)";
        as-path AS264197 ".* (264197|264197 .+)";
        as-path AS264204 ".* (264204|264204 .+)";
        as-path AS264208 ".* (264208|264208 .+)";
        as-path AS264210 ".* (264210|264210 .+)";
        as-path AS264214 ".* (264214|264214 .+)";
        as-path AS264228 ".* (264228|264228 .+)";
        as-path AS264232 ".* (264232|264232 .+)";
        as-path AS264233 ".* (264233|264233 .+)";
        as-path AS264234 ".* (264234|264234 .+)";
        as-path AS264241 ".* (264241|264241 .+)";
        as-path AS264242 ".* (264242|264242 .+)";
        as-path AS264248 ".* (264248|264248 .+)";
        as-path AS264257 ".* (264257|264257 .+)";
        as-path AS264259 ".* (264259|264259 .+)";
        as-path AS264262 ".* (264262|264262 .+)";
        as-path AS264267 ".* (264267|264267 .+)";
        as-path AS264269 ".* (264269|264269 .+)";
        as-path AS264273 ".* (264273|264273 .+)";
        as-path AS264285 ".* (264285|264285 .+)";
        as-path AS264286 ".* (264286|264286 .+)";
        as-path AS264290 ".* (264290|264290 .+)";
        as-path AS264310 ".* (264310|264310 .+)";
        as-path AS264316 ".* (264316|264316 .+)";
        as-path AS264321 ".* (264321|264321 .+)";
        as-path AS264334 ".* (264334|264334 .+)";
        as-path AS264351 ".* (264351|264351 .+)";
        as-path AS264352 ".* (264352|264352 .+)";
        as-path AS264353 ".* (264353|264353 .+)";
        as-path AS264358 ".* (264358|264358 .+)";
        as-path AS264366 ".* (264366|264366 .+)";
        as-path AS264375 ".* (264375|264375 .+)";
        as-path AS264396 ".* (264396|264396 .+)";
        as-path AS264403 ".* (264403|264403 .+)";
        as-path AS264412 ".* (264412|264412 .+)";
        as-path AS264413 ".* (264413|264413 .+)";
        as-path AS264415 ".* (264415|264415 .+)";
        as-path AS264427 ".* (264427|264427 .+)";
        as-path AS264432 ".* (264432|264432 .+)";
        as-path AS264433 ".* (264433|264433 .+)";
        as-path AS264436 ".* (264436|264436 .+)";
        as-path AS264446 ".* (264446|264446 .+)";
        as-path AS264448 ".* (264448|264448 .+)";
        as-path AS264452 ".* (264452|264452 .+)";
        as-path AS264465 ".* (264465|264465 .+)";
        as-path AS264466 ".* (264466|264466 .+)";
        as-path AS264478 ".* (264478|264478 .+)";
        as-path AS264491 ".* (264491|264491 .+)";
        as-path AS264496 ".* (264496|264496 .+)";
        as-path AS264510 ".* (264510|264510 .+)";
        as-path AS264512 ".* (264512|264512 .+)";
        as-path AS264517 ".* (264517|264517 .+)";
        as-path AS264525 ".* (264525|264525 .+)";
        as-path AS264536 ".* (264536|264536 .+)";
        as-path AS264542 ".* (264542|264542 .+)";
        as-path AS264551 ".* (264551|264551 .+)";
        as-path AS264553 ".* (264553|264553 .+)";
        as-path AS264557 ".* (264557|264557 .+)";
        as-path AS264565 ".* (264565|264565 .+)";
        as-path AS264567 ".* (264567|264567 .+)";
        as-path AS264569 ".* (264569|264569 .+)";
        as-path AS264576 ".* (264576|264576 .+)";
        as-path AS264578 ".* (264578|264578 .+)";
        as-path AS264580 ".* (264580|264580 .+)";
        as-path AS264582 ".* (264582|264582 .+)";
        as-path AS264584 ".* (264584|264584 .+)";
        as-path AS264585 ".* (264585|264585 .+)";
        as-path AS264591 ".* (264591|264591 .+)";
        as-path AS264598 ".* (264598|264598 .+)";
        as-path AS264599 ".* (264599|264599 .+)";
        as-path AS264633 ".* (264633|264633 .+)";
        as-path AS264705 ".* (264705|264705 .+)";
        as-path AS264756 ".* (264756|264756 .+)";
        as-path AS264770 ".* (264770|264770 .+)";
        as-path AS264807 ".* (264807|264807 .+)";
        as-path AS264853 ".* (264853|264853 .+)";
        as-path AS264862 ".* (264862|264862 .+)";
        as-path AS264867 ".* (264867|264867 .+)";
        as-path AS264872 ".* (264872|264872 .+)";
        as-path AS264877 ".* (264877|264877 .+)";
        as-path AS264880 ".* (264880|264880 .+)";
        as-path AS264891 ".* (264891|264891 .+)";
        as-path AS264905 ".* (264905|264905 .+)";
        as-path AS264911 ".* (264911|264911 .+)";
        as-path AS264912 ".* (264912|264912 .+)";
        as-path AS264936 ".* (264936|264936 .+)";
        as-path AS264938 ".* (264938|264938 .+)";
        as-path AS264941 ".* (264941|264941 .+)";
        as-path AS264957 ".* (264957|264957 .+)";
        as-path AS264960 ".* (264960|264960 .+)";
        as-path AS264961 ".* (264961|264961 .+)";
        as-path AS264968 ".* (264968|264968 .+)";
        as-path AS264972 ".* (264972|264972 .+)";
        as-path AS264974 ".* (264974|264974 .+)";
        as-path AS264984 ".* (264984|264984 .+)";
        as-path AS264985 ".* (264985|264985 .+)";
        as-path AS264987 ".* (264987|264987 .+)";
        as-path AS264997 ".* (264997|264997 .+)";
        as-path AS265007 ".* (265007|265007 .+)";
        as-path AS265010 ".* (265010|265010 .+)";
        as-path AS265023 ".* (265023|265023 .+)";
        as-path AS265032 ".* (265032|265032 .+)";
        as-path AS265041 ".* (265041|265041 .+)";
        as-path AS265044 ".* (265044|265044 .+)";
        as-path AS265046 ".* (265046|265046 .+)";
        as-path AS265050 ".* (265050|265050 .+)";
        as-path AS265055 ".* (265055|265055 .+)";
        as-path AS265064 ".* (265064|265064 .+)";
        as-path AS265068 ".* (265068|265068 .+)";
        as-path AS265069 ".* (265069|265069 .+)";
        as-path AS265071 ".* (265071|265071 .+)";
        as-path AS265072 ".* (265072|265072 .+)";
        as-path AS265078 ".* (265078|265078 .+)";
        as-path AS265082 ".* (265082|265082 .+)";
        as-path AS265085 ".* (265085|265085 .+)";
        as-path AS265101 ".* (265101|265101 .+)";
        as-path AS265111 ".* (265111|265111 .+)";
        as-path AS265121 ".* (265121|265121 .+)";
        as-path AS265123 ".* (265123|265123 .+)";
        as-path AS265126 ".* (265126|265126 .+)";
        as-path AS265128 ".* (265128|265128 .+)";
        as-path AS265130 ".* (265130|265130 .+)";
        as-path AS265140 ".* (265140|265140 .+)";
        as-path AS265151 ".* (265151|265151 .+)";
        as-path AS265153 ".* (265153|265153 .+)";
        as-path AS265164 ".* (265164|265164 .+)";
        as-path AS265176 ".* (265176|265176 .+)";
        as-path AS265188 ".* (265188|265188 .+)";
        as-path AS265189 ".* (265189|265189 .+)";
        as-path AS265192 ".* (265192|265192 .+)";
        as-path AS265207 ".* (265207|265207 .+)";
        as-path AS265210 ".* (265210|265210 .+)";
        as-path AS265223 ".* (265223|265223 .+)";
        as-path AS265225 ".* (265225|265225 .+)";
        as-path AS265227 ".* (265227|265227 .+)";
        as-path AS265242 ".* (265242|265242 .+)";
        as-path AS265255 ".* (265255|265255 .+)";
        as-path AS265257 ".* (265257|265257 .+)";
        as-path AS265265 ".* (265265|265265 .+)";
        as-path AS265266 ".* (265266|265266 .+)";
        as-path AS265269 ".* (265269|265269 .+)";
        as-path AS265270 ".* (265270|265270 .+)";
        as-path AS265273 ".* (265273|265273 .+)";
        as-path AS265275 ".* (265275|265275 .+)";
        as-path AS265288 ".* (265288|265288 .+)";
        as-path AS265300 ".* (265300|265300 .+)";
        as-path AS265304 ".* (265304|265304 .+)";
        as-path AS265305 ".* (265305|265305 .+)";
        as-path AS265314 ".* (265314|265314 .+)";
        as-path AS265320 ".* (265320|265320 .+)";
        as-path AS265324 ".* (265324|265324 .+)";
        as-path AS265328 ".* (265328|265328 .+)";
        as-path AS265332 ".* (265332|265332 .+)";
        as-path AS265334 ".* (265334|265334 .+)";
        as-path AS265335 ".* (265335|265335 .+)";
        as-path AS265337 ".* (265337|265337 .+)";
        as-path AS265342 ".* (265342|265342 .+)";
        as-path AS265359 ".* (265359|265359 .+)";
        as-path AS265378 ".* (265378|265378 .+)";
        as-path AS265384 ".* (265384|265384 .+)";
        as-path AS265385 ".* (265385|265385 .+)";
        as-path AS265386 ".* (265386|265386 .+)";
        as-path AS265389 ".* (265389|265389 .+)";
        as-path AS265391 ".* (265391|265391 .+)";
        as-path AS265400 ".* (265400|265400 .+)";
        as-path AS265401 ".* (265401|265401 .+)";
        as-path AS265405 ".* (265405|265405 .+)";
        as-path AS265407 ".* (265407|265407 .+)";
        as-path AS265408 ".* (265408|265408 .+)";
        as-path AS265409 ".* (265409|265409 .+)";
        as-path AS265410 ".* (265410|265410 .+)";
        as-path AS265415 ".* (265415|265415 .+)";
        as-path AS265430 ".* (265430|265430 .+)";
        as-path AS265446 ".* (265446|265446 .+)";
        as-path AS265455 ".* (265455|265455 .+)";
        as-path AS265463 ".* (265463|265463 .+)";
        as-path AS265466 ".* (265466|265466 .+)";
        as-path AS265470 ".* (265470|265470 .+)";
        as-path AS265474 ".* (265474|265474 .+)";
        as-path AS265487 ".* (265487|265487 .+)";
        as-path AS265495 ".* (265495|265495 .+)";
        as-path AS265661 ".* (265661|265661 .+)";
        as-path AS265703 ".* (265703|265703 .+)";
        as-path AS265728 ".* (265728|265728 .+)";
        as-path AS265759 ".* (265759|265759 .+)";
        as-path AS265789 ".* (265789|265789 .+)";
        as-path AS265864 ".* (265864|265864 .+)";
        as-path AS265883 ".* (265883|265883 .+)";
        as-path AS265885 ".* (265885|265885 .+)";
        as-path AS265910 ".* (265910|265910 .+)";
        as-path AS265911 ".* (265911|265911 .+)";
        as-path AS265912 ".* (265912|265912 .+)";
        as-path AS265916 ".* (265916|265916 .+)";
        as-path AS265919 ".* (265919|265919 .+)";
        as-path AS265929 ".* (265929|265929 .+)";
        as-path AS265953 ".* (265953|265953 .+)";
        as-path AS265954 ".* (265954|265954 .+)";
        as-path AS265976 ".* (265976|265976 .+)";
        as-path AS265979 ".* (265979|265979 .+)";
        as-path AS265980 ".* (265980|265980 .+)";
        as-path AS265983 ".* (265983|265983 .+)";
        as-path AS265995 ".* (265995|265995 .+)";
        as-path AS266000 ".* (266000|266000 .+)";
        as-path AS266023 ".* (266023|266023 .+)";
        as-path AS266035 ".* (266035|266035 .+)";
        as-path AS266093 ".* (266093|266093 .+)";
        as-path AS266095 ".* (266095|266095 .+)";
        as-path AS266115 ".* (266115|266115 .+)";
        as-path AS266124 ".* (266124|266124 .+)";
        as-path AS266128 ".* (266128|266128 .+)";
        as-path AS266137 ".* (266137|266137 .+)";
        as-path AS266144 ".* (266144|266144 .+)";
        as-path AS266153 ".* (266153|266153 .+)";
        as-path AS26616 ".* (26616|26616 .+)";
        as-path AS266163 ".* (266163|266163 .+)";
        as-path AS266164 ".* (266164|266164 .+)";
        as-path AS266166 ".* (266166|266166 .+)";
        as-path AS266167 ".* (266167|266167 .+)";
        as-path AS266170 ".* (266170|266170 .+)";
        as-path AS266177 ".* (266177|266177 .+)";
        as-path AS266180 ".* (266180|266180 .+)";
        as-path AS266188 ".* (266188|266188 .+)";
        as-path AS266200 ".* (266200|266200 .+)";
        as-path AS266203 ".* (266203|266203 .+)";
        as-path AS266204 ".* (266204|266204 .+)";
        as-path AS266213 ".* (266213|266213 .+)";
        as-path AS266217 ".* (266217|266217 .+)";
        as-path AS266226 ".* (266226|266226 .+)";
        as-path AS266228 ".* (266228|266228 .+)";
        as-path AS266231 ".* (266231|266231 .+)";
        as-path AS266236 ".* (266236|266236 .+)";
        as-path AS266248 ".* (266248|266248 .+)";
        as-path AS266252 ".* (266252|266252 .+)";
        as-path AS266255 ".* (266255|266255 .+)";
        as-path AS266266 ".* (266266|266266 .+)";
        as-path AS266273 ".* (266273|266273 .+)";
        as-path AS266280 ".* (266280|266280 .+)";
        as-path AS266295 ".* (266295|266295 .+)";
        as-path AS266297 ".* (266297|266297 .+)";
        as-path AS266311 ".* (266311|266311 .+)";
        as-path AS266317 ".* (266317|266317 .+)";
        as-path AS266333 ".* (266333|266333 .+)";
        as-path AS266337 ".* (266337|266337 .+)";
        as-path AS266351 ".* (266351|266351 .+)";
        as-path AS266353 ".* (266353|266353 .+)";
        as-path AS266354 ".* (266354|266354 .+)";
        as-path AS266355 ".* (266355|266355 .+)";
        as-path AS266362 ".* (266362|266362 .+)";
        as-path AS266367 ".* (266367|266367 .+)";
        as-path AS266408 ".* (266408|266408 .+)";
        as-path AS266410 ".* (266410|266410 .+)";
        as-path AS266414 ".* (266414|266414 .+)";
        as-path AS266416 ".* (266416|266416 .+)";
        as-path AS266421 ".* (266421|266421 .+)";
        as-path AS266429 ".* (266429|266429 .+)";
        as-path AS266433 ".* (266433|266433 .+)";
        as-path AS266437 ".* (266437|266437 .+)";
        as-path AS266440 ".* (266440|266440 .+)";
        as-path AS266447 ".* (266447|266447 .+)";
        as-path AS266452 ".* (266452|266452 .+)";
        as-path AS266463 ".* (266463|266463 .+)";
        as-path AS266484 ".* (266484|266484 .+)";
        as-path AS266486 ".* (266486|266486 .+)";
        as-path AS266498 ".* (266498|266498 .+)";
        as-path AS266503 ".* (266503|266503 .+)";
        as-path AS266504 ".* (266504|266504 .+)";
        as-path AS266506 ".* (266506|266506 .+)";
        as-path AS266517 ".* (266517|266517 .+)";
        as-path AS266525 ".* (266525|266525 .+)";
        as-path AS266526 ".* (266526|266526 .+)";
        as-path AS266529 ".* (266529|266529 .+)";
        as-path AS266542 ".* (266542|266542 .+)";
        as-path AS266559 ".* (266559|266559 .+)";
        as-path AS266568 ".* (266568|266568 .+)";
        as-path AS266578 ".* (266578|266578 .+)";
        as-path AS266599 ".* (266599|266599 .+)";
        as-path AS266603 ".* (266603|266603 .+)";
        as-path AS266614 ".* (266614|266614 .+)";
        as-path AS266615 ".* (266615|266615 .+)";
        as-path AS266616 ".* (266616|266616 .+)";
        as-path AS266617 ".* (266617|266617 .+)";
        as-path AS266624 ".* (266624|266624 .+)";
        as-path AS266627 ".* (266627|266627 .+)";
        as-path AS266631 ".* (266631|266631 .+)";
        as-path AS266633 ".* (266633|266633 .+)";
        as-path AS266643 ".* (266643|266643 .+)";
        as-path AS266644 ".* (266644|266644 .+)";
        as-path AS266645 ".* (266645|266645 .+)";
        as-path AS266650 ".* (266650|266650 .+)";
        as-path AS266694 ".* (266694|266694 .+)";
        as-path AS266784 ".* (266784|266784 .+)";
        as-path AS266803 ".* (266803|266803 .+)";
        as-path AS266805 ".* (266805|266805 .+)";
        as-path AS266814 ".* (266814|266814 .+)";
        as-path AS266831 ".* (266831|266831 .+)";
        as-path AS266858 ".* (266858|266858 .+)";
        as-path AS266876 ".* (266876|266876 .+)";
        as-path AS266911 ".* (266911|266911 .+)";
        as-path AS266923 ".* (266923|266923 .+)";
        as-path AS266942 ".* (266942|266942 .+)";
        as-path AS266947 ".* (266947|266947 .+)";
        as-path AS266961 ".* (266961|266961 .+)";
        as-path AS266976 ".* (266976|266976 .+)";
        as-path AS266984 ".* (266984|266984 .+)";
        as-path AS266992 ".* (266992|266992 .+)";
        as-path AS266998 ".* (266998|266998 .+)";
        as-path AS266999 ".* (266999|266999 .+)";
        as-path AS267006 ".* (267006|267006 .+)";
        as-path AS267009 ".* (267009|267009 .+)";
        as-path AS267022 ".* (267022|267022 .+)";
        as-path AS267031 ".* (267031|267031 .+)";
        as-path AS267032 ".* (267032|267032 .+)";
        as-path AS267045 ".* (267045|267045 .+)";
        as-path AS267054 ".* (267054|267054 .+)";
        as-path AS267056 ".* (267056|267056 .+)";
        as-path AS267078 ".* (267078|267078 .+)";
        as-path AS267080 ".* (267080|267080 .+)";
        as-path AS267091 ".* (267091|267091 .+)";
        as-path AS267094 ".* (267094|267094 .+)";
        as-path AS267097 ".* (267097|267097 .+)";
        as-path AS267103 ".* (267103|267103 .+)";
        as-path AS267114 ".* (267114|267114 .+)";
        as-path AS267127 ".* (267127|267127 .+)";
        as-path AS267135 ".* (267135|267135 .+)";
        as-path AS267138 ".* (267138|267138 .+)";
        as-path AS267150 ".* (267150|267150 .+)";
        as-path AS267156 ".* (267156|267156 .+)";
        as-path AS267158 ".* (267158|267158 .+)";
        as-path AS267163 ".* (267163|267163 .+)";
        as-path AS267164 ".* (267164|267164 .+)";
        as-path AS267176 ".* (267176|267176 .+)";
        as-path AS267180 ".* (267180|267180 .+)";
        as-path AS267182 ".* (267182|267182 .+)";
        as-path AS267183 ".* (267183|267183 .+)";
        as-path AS267191 ".* (267191|267191 .+)";
        as-path AS267194 ".* (267194|267194 .+)";
        as-path AS267195 ".* (267195|267195 .+)";
        as-path AS267200 ".* (267200|267200 .+)";
        as-path AS267204 ".* (267204|267204 .+)";
        as-path AS267208 ".* (267208|267208 .+)";
        as-path AS267233 ".* (267233|267233 .+)";
        as-path AS267234 ".* (267234|267234 .+)";
        as-path AS267246 ".* (267246|267246 .+)";
        as-path AS267264 ".* (267264|267264 .+)";
        as-path AS267265 ".* (267265|267265 .+)";
        as-path AS267276 ".* (267276|267276 .+)";
        as-path AS267283 ".* (267283|267283 .+)";
        as-path AS267284 ".* (267284|267284 .+)";
        as-path AS267289 ".* (267289|267289 .+)";
        as-path AS267293 ".* (267293|267293 .+)";
        as-path AS267330 ".* (267330|267330 .+)";
        as-path AS267339 ".* (267339|267339 .+)";
        as-path AS267358 ".* (267358|267358 .+)";
        as-path AS267379 ".* (267379|267379 .+)";
        as-path AS267380 ".* (267380|267380 .+)";
        as-path AS267389 ".* (267389|267389 .+)";
        as-path AS267396 ".* (267396|267396 .+)";
        as-path AS267403 ".* (267403|267403 .+)";
        as-path AS267407 ".* (267407|267407 .+)";
        as-path AS267418 ".* (267418|267418 .+)";
        as-path AS267420 ".* (267420|267420 .+)";
        as-path AS267434 ".* (267434|267434 .+)";
        as-path AS267451 ".* (267451|267451 .+)";
        as-path AS267453 ".* (267453|267453 .+)";
        as-path AS267455 ".* (267455|267455 .+)";
        as-path AS267502 ".* (267502|267502 .+)";
        as-path AS267503 ".* (267503|267503 .+)";
        as-path AS267508 ".* (267508|267508 .+)";
        as-path AS267521 ".* (267521|267521 .+)";
        as-path AS267523 ".* (267523|267523 .+)";
        as-path AS267528 ".* (267528|267528 .+)";
        as-path AS267531 ".* (267531|267531 .+)";
        as-path AS267536 ".* (267536|267536 .+)";
        as-path AS267539 ".* (267539|267539 .+)";
        as-path AS267540 ".* (267540|267540 .+)";
        as-path AS267541 ".* (267541|267541 .+)";
        as-path AS267543 ".* (267543|267543 .+)";
        as-path AS267558 ".* (267558|267558 .+)";
        as-path AS267563 ".* (267563|267563 .+)";
        as-path AS267571 ".* (267571|267571 .+)";
        as-path AS267574 ".* (267574|267574 .+)";
        as-path AS267575 ".* (267575|267575 .+)";
        as-path AS267581 ".* (267581|267581 .+)";
        as-path AS267582 ".* (267582|267582 .+)";
        as-path AS267583 ".* (267583|267583 .+)";
        as-path AS267592 ".* (267592|267592 .+)";
        as-path AS267593 ".* (267593|267593 .+)";
        as-path AS267596 ".* (267596|267596 .+)";
        as-path AS267603 ".* (267603|267603 .+)";
        as-path AS267605 ".* (267605|267605 .+)";
        as-path AS267613 ".* (267613|267613 .+)";
        as-path AS267619 ".* (267619|267619 .+)";
        as-path AS267633 ".* (267633|267633 .+)";
        as-path AS267635 ".* (267635|267635 .+)";
        as-path AS267640 ".* (267640|267640 .+)";
        as-path AS267648 ".* (267648|267648 .+)";
        as-path AS267650 ".* (267650|267650 .+)";
        as-path AS267651 ".* (267651|267651 .+)";
        as-path AS267675 ".* (267675|267675 .+)";
        as-path AS267702 ".* (267702|267702 .+)";
        as-path AS267704 ".* (267704|267704 .+)";
        as-path AS267723 ".* (267723|267723 .+)";
        as-path AS267767 ".* (267767|267767 .+)";
        as-path AS267829 ".* (267829|267829 .+)";
        as-path AS267837 ".* (267837|267837 .+)";
        as-path AS267850 ".* (267850|267850 .+)";
        as-path AS267885 ".* (267885|267885 .+)";
        as-path AS267905 ".* (267905|267905 .+)";
        as-path AS267914 ".* (267914|267914 .+)";
        as-path AS267939 ".* (267939|267939 .+)";
        as-path AS267983 ".* (267983|267983 .+)";
        as-path AS267988 ".* (267988|267988 .+)";
        as-path AS267990 ".* (267990|267990 .+)";
        as-path AS268004 ".* (268004|268004 .+)";
        as-path AS268011 ".* (268011|268011 .+)";
        as-path AS268012 ".* (268012|268012 .+)";
        as-path AS268017 ".* (268017|268017 .+)";
        as-path AS268019 ".* (268019|268019 .+)";
        as-path AS268024 ".* (268024|268024 .+)";
        as-path AS268027 ".* (268027|268027 .+)";
        as-path AS268030 ".* (268030|268030 .+)";
        as-path AS268037 ".* (268037|268037 .+)";
        as-path AS268053 ".* (268053|268053 .+)";
        as-path AS268057 ".* (268057|268057 .+)";
        as-path AS268065 ".* (268065|268065 .+)";
        as-path AS268067 ".* (268067|268067 .+)";
        as-path AS268073 ".* (268073|268073 .+)";
        as-path AS268076 ".* (268076|268076 .+)";
        as-path AS268077 ".* (268077|268077 .+)";
        as-path AS268081 ".* (268081|268081 .+)";
        as-path AS268082 ".* (268082|268082 .+)";
        as-path AS268085 ".* (268085|268085 .+)";
        as-path AS268087 ".* (268087|268087 .+)";
        as-path AS268092 ".* (268092|268092 .+)";
        as-path AS268094 ".* (268094|268094 .+)";
        as-path AS268096 ".* (268096|268096 .+)";
        as-path AS268099 ".* (268099|268099 .+)";
        as-path AS268100 ".* (268100|268100 .+)";
        as-path AS268116 ".* (268116|268116 .+)";
        as-path AS268120 ".* (268120|268120 .+)";
        as-path AS268138 ".* (268138|268138 .+)";
        as-path AS268141 ".* (268141|268141 .+)";
        as-path AS268149 ".* (268149|268149 .+)";
        as-path AS268170 ".* (268170|268170 .+)";
        as-path AS268171 ".* (268171|268171 .+)";
        as-path AS268172 ".* (268172|268172 .+)";
        as-path AS268177 ".* (268177|268177 .+)";
        as-path AS268183 ".* (268183|268183 .+)";
        as-path AS268184 ".* (268184|268184 .+)";
        as-path AS268213 ".* (268213|268213 .+)";
        as-path AS268221 ".* (268221|268221 .+)";
        as-path AS268225 ".* (268225|268225 .+)";
        as-path AS268238 ".* (268238|268238 .+)";
        as-path AS268239 ".* (268239|268239 .+)";
        as-path AS268244 ".* (268244|268244 .+)";
        as-path AS268246 ".* (268246|268246 .+)";
        as-path AS268251 ".* (268251|268251 .+)";
        as-path AS268257 ".* (268257|268257 .+)";
        as-path AS268258 ".* (268258|268258 .+)";
        as-path AS268285 ".* (268285|268285 .+)";
        as-path AS268297 ".* (268297|268297 .+)";
        as-path AS268310 ".* (268310|268310 .+)";
        as-path AS268312 ".* (268312|268312 .+)";
        as-path AS268319 ".* (268319|268319 .+)";
        as-path AS268327 ".* (268327|268327 .+)";
        as-path AS268334 ".* (268334|268334 .+)";
        as-path AS268342 ".* (268342|268342 .+)";
        as-path AS268352 ".* (268352|268352 .+)";
        as-path AS268357 ".* (268357|268357 .+)";
        as-path AS268363 ".* (268363|268363 .+)";
        as-path AS268368 ".* (268368|268368 .+)";
        as-path AS268376 ".* (268376|268376 .+)";
        as-path AS268389 ".* (268389|268389 .+)";
        as-path AS268409 ".* (268409|268409 .+)";
        as-path AS268410 ".* (268410|268410 .+)";
        as-path AS268411 ".* (268411|268411 .+)";
        as-path AS268417 ".* (268417|268417 .+)";
        as-path AS268428 ".* (268428|268428 .+)";
        as-path AS268434 ".* (268434|268434 .+)";
        as-path AS268438 ".* (268438|268438 .+)";
        as-path AS268441 ".* (268441|268441 .+)";
        as-path AS268442 ".* (268442|268442 .+)";
        as-path AS268445 ".* (268445|268445 .+)";
        as-path AS268447 ".* (268447|268447 .+)";
        as-path AS268454 ".* (268454|268454 .+)";
        as-path AS268455 ".* (268455|268455 .+)";
        as-path AS268456 ".* (268456|268456 .+)";
        as-path AS268459 ".* (268459|268459 .+)";
        as-path AS268471 ".* (268471|268471 .+)";
        as-path AS268478 ".* (268478|268478 .+)";
        as-path AS268479 ".* (268479|268479 .+)";
        as-path AS268487 ".* (268487|268487 .+)";
        as-path AS268494 ".* (268494|268494 .+)";
        as-path AS268495 ".* (268495|268495 .+)";
        as-path AS268503 ".* (268503|268503 .+)";
        as-path AS268513 ".* (268513|268513 .+)";
        as-path AS268518 ".* (268518|268518 .+)";
        as-path AS268521 ".* (268521|268521 .+)";
        as-path AS268526 ".* (268526|268526 .+)";
        as-path AS268527 ".* (268527|268527 .+)";
        as-path AS268529 ".* (268529|268529 .+)";
        as-path AS268538 ".* (268538|268538 .+)";
        as-path AS268541 ".* (268541|268541 .+)";
        as-path AS268549 ".* (268549|268549 .+)";
        as-path AS268554 ".* (268554|268554 .+)";
        as-path AS268556 ".* (268556|268556 .+)";
        as-path AS268557 ".* (268557|268557 .+)";
        as-path AS268560 ".* (268560|268560 .+)";
        as-path AS268565 ".* (268565|268565 .+)";
        as-path AS268571 ".* (268571|268571 .+)";
        as-path AS268587 ".* (268587|268587 .+)";
        as-path AS268589 ".* (268589|268589 .+)";
        as-path AS268592 ".* (268592|268592 .+)";
        as-path AS268595 ".* (268595|268595 .+)";
        as-path AS268599 ".* (268599|268599 .+)";
        as-path AS268610 ".* (268610|268610 .+)";
        as-path AS268611 ".* (268611|268611 .+)";
        as-path AS268622 ".* (268622|268622 .+)";
        as-path AS268626 ".* (268626|268626 .+)";
        as-path AS268629 ".* (268629|268629 .+)";
        as-path AS268633 ".* (268633|268633 .+)";
        as-path AS268649 ".* (268649|268649 .+)";
        as-path AS268656 ".* (268656|268656 .+)";
        as-path AS268665 ".* (268665|268665 .+)";
        as-path AS268668 ".* (268668|268668 .+)";
        as-path AS268684 ".* (268684|268684 .+)";
        as-path AS268692 ".* (268692|268692 .+)";
        as-path AS268702 ".* (268702|268702 .+)";
        as-path AS268714 ".* (268714|268714 .+)";
        as-path AS268719 ".* (268719|268719 .+)";
        as-path AS268733 ".* (268733|268733 .+)";
        as-path AS268736 ".* (268736|268736 .+)";
        as-path AS268737 ".* (268737|268737 .+)";
        as-path AS268741 ".* (268741|268741 .+)";
        as-path AS268746 ".* (268746|268746 .+)";
        as-path AS268753 ".* (268753|268753 .+)";
        as-path AS268757 ".* (268757|268757 .+)";
        as-path AS268764 ".* (268764|268764 .+)";
        as-path AS268772 ".* (268772|268772 .+)";
        as-path AS268774 ".* (268774|268774 .+)";
        as-path AS268786 ".* (268786|268786 .+)";
        as-path AS268791 ".* (268791|268791 .+)";
        as-path AS268798 ".* (268798|268798 .+)";
        as-path AS268811 ".* (268811|268811 .+)";
        as-path AS268813 ".* (268813|268813 .+)";
        as-path AS268824 ".* (268824|268824 .+)";
        as-path AS268828 ".* (268828|268828 .+)";
        as-path AS268838 ".* (268838|268838 .+)";
        as-path AS268849 ".* (268849|268849 .+)";
        as-path AS268854 ".* (268854|268854 .+)";
        as-path AS268858 ".* (268858|268858 .+)";
        as-path AS268887 ".* (268887|268887 .+)";
        as-path AS268888 ".* (268888|268888 .+)";
        as-path AS268916 ".* (268916|268916 .+)";
        as-path AS268931 ".* (268931|268931 .+)";
        as-path AS268938 ".* (268938|268938 .+)";
        as-path AS268939 ".* (268939|268939 .+)";
        as-path AS268942 ".* (268942|268942 .+)";
        as-path AS268946 ".* (268946|268946 .+)";
        as-path AS268948 ".* (268948|268948 .+)";
        as-path AS268949 ".* (268949|268949 .+)";
        as-path AS268973 ".* (268973|268973 .+)";
        as-path AS268974 ".* (268974|268974 .+)";
        as-path AS268976 ".* (268976|268976 .+)";
        as-path AS268977 ".* (268977|268977 .+)";
        as-path AS268991 ".* (268991|268991 .+)";
        as-path AS268996 ".* (268996|268996 .+)";
        as-path AS268997 ".* (268997|268997 .+)";
        as-path AS269000 ".* (269000|269000 .+)";
        as-path AS269011 ".* (269011|269011 .+)";
        as-path AS269016 ".* (269016|269016 .+)";
        as-path AS269018 ".* (269018|269018 .+)";
        as-path AS269024 ".* (269024|269024 .+)";
        as-path AS269030 ".* (269030|269030 .+)";
        as-path AS269038 ".* (269038|269038 .+)";
        as-path AS269039 ".* (269039|269039 .+)";
        as-path AS269050 ".* (269050|269050 .+)";
        as-path AS269051 ".* (269051|269051 .+)";
        as-path AS269054 ".* (269054|269054 .+)";
        as-path AS269060 ".* (269060|269060 .+)";
        as-path AS269061 ".* (269061|269061 .+)";
        as-path AS269074 ".* (269074|269074 .+)";
        as-path AS269084 ".* (269084|269084 .+)";
        as-path AS269090 ".* (269090|269090 .+)";
        as-path AS269096 ".* (269096|269096 .+)";
        as-path AS269102 ".* (269102|269102 .+)";
        as-path AS269105 ".* (269105|269105 .+)";
        as-path AS269110 ".* (269110|269110 .+)";
        as-path AS269120 ".* (269120|269120 .+)";
        as-path AS269130 ".* (269130|269130 .+)";
        as-path AS269136 ".* (269136|269136 .+)";
        as-path AS269141 ".* (269141|269141 .+)";
        as-path AS269205 ".* (269205|269205 .+)";
        as-path AS269223 ".* (269223|269223 .+)";
        as-path AS269231 ".* (269231|269231 .+)";
        as-path AS269238 ".* (269238|269238 .+)";
        as-path AS269244 ".* (269244|269244 .+)";
        as-path AS269245 ".* (269245|269245 .+)";
        as-path AS269247 ".* (269247|269247 .+)";
        as-path AS269258 ".* (269258|269258 .+)";
        as-path AS269260 ".* (269260|269260 .+)";
        as-path AS269263 ".* (269263|269263 .+)";
        as-path AS269269 ".* (269269|269269 .+)";
        as-path AS269272 ".* (269272|269272 .+)";
        as-path AS269277 ".* (269277|269277 .+)";
        as-path AS269281 ".* (269281|269281 .+)";
        as-path AS269289 ".* (269289|269289 .+)";
        as-path AS269303 ".* (269303|269303 .+)";
        as-path AS269306 ".* (269306|269306 .+)";
        as-path AS269320 ".* (269320|269320 .+)";
        as-path AS269323 ".* (269323|269323 .+)";
        as-path AS269325 ".* (269325|269325 .+)";
        as-path AS269336 ".* (269336|269336 .+)";
        as-path AS269338 ".* (269338|269338 .+)";
        as-path AS269342 ".* (269342|269342 .+)";
        as-path AS269343 ".* (269343|269343 .+)";
        as-path AS269347 ".* (269347|269347 .+)";
        as-path AS269357 ".* (269357|269357 .+)";
        as-path AS269366 ".* (269366|269366 .+)";
        as-path AS269368 ".* (269368|269368 .+)";
        as-path AS269371 ".* (269371|269371 .+)";
        as-path AS269372 ".* (269372|269372 .+)";
        as-path AS269381 ".* (269381|269381 .+)";
        as-path AS269388 ".* (269388|269388 .+)";
        as-path AS269394 ".* (269394|269394 .+)";
        as-path AS269425 ".* (269425|269425 .+)";
        as-path AS269435 ".* (269435|269435 .+)";
        as-path AS269450 ".* (269450|269450 .+)";
        as-path AS269461 ".* (269461|269461 .+)";
        as-path AS269474 ".* (269474|269474 .+)";
        as-path AS269477 ".* (269477|269477 .+)";
        as-path AS269496 ".* (269496|269496 .+)";
        as-path AS269503 ".* (269503|269503 .+)";
        as-path AS269508 ".* (269508|269508 .+)";
        as-path AS269515 ".* (269515|269515 .+)";
        as-path AS269529 ".* (269529|269529 .+)";
        as-path AS269535 ".* (269535|269535 .+)";
        as-path AS269556 ".* (269556|269556 .+)";
        as-path AS269558 ".* (269558|269558 .+)";
        as-path AS269564 ".* (269564|269564 .+)";
        as-path AS269572 ".* (269572|269572 .+)";
        as-path AS269573 ".* (269573|269573 .+)";
        as-path AS269574 ".* (269574|269574 .+)";
        as-path AS269579 ".* (269579|269579 .+)";
        as-path AS269582 ".* (269582|269582 .+)";
        as-path AS269584 ".* (269584|269584 .+)";
        as-path AS269591 ".* (269591|269591 .+)";
        as-path AS269601 ".* (269601|269601 .+)";
        as-path AS269606 ".* (269606|269606 .+)";
        as-path AS269609 ".* (269609|269609 .+)";
        as-path AS269615 ".* (269615|269615 .+)";
        as-path AS269630 ".* (269630|269630 .+)";
        as-path AS269641 ".* (269641|269641 .+)";
        as-path AS269645 ".* (269645|269645 .+)";
        as-path AS269648 ".* (269648|269648 .+)";
        as-path AS269654 ".* (269654|269654 .+)";
        as-path AS269658 ".* (269658|269658 .+)";
        as-path AS269660 ".* (269660|269660 .+)";
        as-path AS269662 ".* (269662|269662 .+)";
        as-path AS269675 ".* (269675|269675 .+)";
        as-path AS269690 ".* (269690|269690 .+)";
        as-path AS269691 ".* (269691|269691 .+)";
        as-path AS269698 ".* (269698|269698 .+)";
        as-path AS269704 ".* (269704|269704 .+)";
        as-path AS269711 ".* (269711|269711 .+)";
        as-path AS269712 ".* (269712|269712 .+)";
        as-path AS269721 ".* (269721|269721 .+)";
        as-path AS269726 ".* (269726|269726 .+)";
        as-path AS269731 ".* (269731|269731 .+)";
        as-path AS269748 ".* (269748|269748 .+)";
        as-path AS269783 ".* (269783|269783 .+)";
        as-path AS269878 ".* (269878|269878 .+)";
        as-path AS269930 ".* (269930|269930 .+)";
        as-path AS269932 ".* (269932|269932 .+)";
        as-path AS269976 ".* (269976|269976 .+)";
        as-path AS270014 ".* (270014|270014 .+)";
        as-path AS270052 ".* (270052|270052 .+)";
        as-path AS270096 ".* (270096|270096 .+)";
        as-path AS270240 ".* (270240|270240 .+)";
        as-path AS270241 ".* (270241|270241 .+)";
        as-path AS270244 ".* (270244|270244 .+)";
        as-path AS270256 ".* (270256|270256 .+)";
        as-path AS270262 ".* (270262|270262 .+)";
        as-path AS270266 ".* (270266|270266 .+)";
        as-path AS270283 ".* (270283|270283 .+)";
        as-path AS270284 ".* (270284|270284 .+)";
        as-path AS270304 ".* (270304|270304 .+)";
        as-path AS270306 ".* (270306|270306 .+)";
        as-path AS270336 ".* (270336|270336 .+)";
        as-path AS270348 ".* (270348|270348 .+)";
        as-path AS270349 ".* (270349|270349 .+)";
        as-path AS270350 ".* (270350|270350 .+)";
        as-path AS270352 ".* (270352|270352 .+)";
        as-path AS270353 ".* (270353|270353 .+)";
        as-path AS270355 ".* (270355|270355 .+)";
        as-path AS270357 ".* (270357|270357 .+)";
        as-path AS270361 ".* (270361|270361 .+)";
        as-path AS270362 ".* (270362|270362 .+)";
        as-path AS270367 ".* (270367|270367 .+)";
        as-path AS270368 ".* (270368|270368 .+)";
        as-path AS270382 ".* (270382|270382 .+)";
        as-path AS270385 ".* (270385|270385 .+)";
        as-path AS270388 ".* (270388|270388 .+)";
        as-path AS270398 ".* (270398|270398 .+)";
        as-path AS270399 ".* (270399|270399 .+)";
        as-path AS270400 ".* (270400|270400 .+)";
        as-path AS270401 ".* (270401|270401 .+)";
        as-path AS270405 ".* (270405|270405 .+)";
        as-path AS270418 ".* (270418|270418 .+)";
        as-path AS270422 ".* (270422|270422 .+)";
        as-path AS270433 ".* (270433|270433 .+)";
        as-path AS270434 ".* (270434|270434 .+)";
        as-path AS270438 ".* (270438|270438 .+)";
        as-path AS270441 ".* (270441|270441 .+)";
        as-path AS270452 ".* (270452|270452 .+)";
        as-path AS270459 ".* (270459|270459 .+)";
        as-path AS270470 ".* (270470|270470 .+)";
        as-path AS270483 ".* (270483|270483 .+)";
        as-path AS270484 ".* (270484|270484 .+)";
        as-path AS270491 ".* (270491|270491 .+)";
        as-path AS270501 ".* (270501|270501 .+)";
        as-path AS270502 ".* (270502|270502 .+)";
        as-path AS270506 ".* (270506|270506 .+)";
        as-path AS270520 ".* (270520|270520 .+)";
        as-path AS270524 ".* (270524|270524 .+)";
        as-path AS270535 ".* (270535|270535 .+)";
        as-path AS270567 ".* (270567|270567 .+)";
        as-path AS270571 ".* (270571|270571 .+)";
        as-path AS270576 ".* (270576|270576 .+)";
        as-path AS270579 ".* (270579|270579 .+)";
        as-path AS270585 ".* (270585|270585 .+)";
        as-path AS270590 ".* (270590|270590 .+)";
        as-path AS270601 ".* (270601|270601 .+)";
        as-path AS270603 ".* (270603|270603 .+)";
        as-path AS270607 ".* (270607|270607 .+)";
        as-path AS270608 ".* (270608|270608 .+)";
        as-path AS270613 ".* (270613|270613 .+)";
        as-path AS270614 ".* (270614|270614 .+)";
        as-path AS270616 ".* (270616|270616 .+)";
        as-path AS270623 ".* (270623|270623 .+)";
        as-path AS270648 ".* (270648|270648 .+)";
        as-path AS270683 ".* (270683|270683 .+)";
        as-path AS270684 ".* (270684|270684 .+)";
        as-path AS270685 ".* (270685|270685 .+)";
        as-path AS270690 ".* (270690|270690 .+)";
        as-path AS270713 ".* (270713|270713 .+)";
        as-path AS270717 ".* (270717|270717 .+)";
        as-path AS270722 ".* (270722|270722 .+)";
        as-path AS270733 ".* (270733|270733 .+)";
        as-path AS270734 ".* (270734|270734 .+)";
        as-path AS270735 ".* (270735|270735 .+)";
        as-path AS270737 ".* (270737|270737 .+)";
        as-path AS270750 ".* (270750|270750 .+)";
        as-path AS270758 ".* (270758|270758 .+)";
        as-path AS270766 ".* (270766|270766 .+)";
        as-path AS270770 ".* (270770|270770 .+)";
        as-path AS270812 ".* (270812|270812 .+)";
        as-path AS270824 ".* (270824|270824 .+)";
        as-path AS270829 ".* (270829|270829 .+)";
        as-path AS270830 ".* (270830|270830 .+)";
        as-path AS270834 ".* (270834|270834 .+)";
        as-path AS270850 ".* (270850|270850 .+)";
        as-path AS270859 ".* (270859|270859 .+)";
        as-path AS270865 ".* (270865|270865 .+)";
        as-path AS270881 ".* (270881|270881 .+)";
        as-path AS270885 ".* (270885|270885 .+)";
        as-path AS270894 ".* (270894|270894 .+)";
        as-path AS270908 ".* (270908|270908 .+)";
        as-path AS270914 ".* (270914|270914 .+)";
        as-path AS270931 ".* (270931|270931 .+)";
        as-path AS270941 ".* (270941|270941 .+)";
        as-path AS270943 ".* (270943|270943 .+)";
        as-path AS270944 ".* (270944|270944 .+)";
        as-path AS270956 ".* (270956|270956 .+)";
        as-path AS270957 ".* (270957|270957 .+)";
        as-path AS270959 ".* (270959|270959 .+)";
        as-path AS270960 ".* (270960|270960 .+)";
        as-path AS270963 ".* (270963|270963 .+)";
        as-path AS270965 ".* (270965|270965 .+)";
        as-path AS270972 ".* (270972|270972 .+)";
        as-path AS270979 ".* (270979|270979 .+)";
        as-path AS270984 ".* (270984|270984 .+)";
        as-path AS270992 ".* (270992|270992 .+)";
        as-path AS270996 ".* (270996|270996 .+)";
        as-path AS270997 ".* (270997|270997 .+)";
        as-path AS271006 ".* (271006|271006 .+)";
        as-path AS271007 ".* (271007|271007 .+)";
        as-path AS271019 ".* (271019|271019 .+)";
        as-path AS271021 ".* (271021|271021 .+)";
        as-path AS271031 ".* (271031|271031 .+)";
        as-path AS271040 ".* (271040|271040 .+)";
        as-path AS271056 ".* (271056|271056 .+)";
        as-path AS271058 ".* (271058|271058 .+)";
        as-path AS271066 ".* (271066|271066 .+)";
        as-path AS271072 ".* (271072|271072 .+)";
        as-path AS271079 ".* (271079|271079 .+)";
        as-path AS271090 ".* (271090|271090 .+)";
        as-path AS271098 ".* (271098|271098 .+)";
        as-path AS271099 ".* (271099|271099 .+)";
        as-path AS271102 ".* (271102|271102 .+)";
        as-path AS271113 ".* (271113|271113 .+)";
        as-path AS271117 ".* (271117|271117 .+)";
        as-path AS271131 ".* (271131|271131 .+)";
        as-path AS271139 ".* (271139|271139 .+)";
        as-path AS271145 ".* (271145|271145 .+)";
        as-path AS271146 ".* (271146|271146 .+)";
        as-path AS271148 ".* (271148|271148 .+)";
        as-path AS271150 ".* (271150|271150 .+)";
        as-path AS271170 ".* (271170|271170 .+)";
        as-path AS271175 ".* (271175|271175 .+)";
        as-path AS271194 ".* (271194|271194 .+)";
        as-path AS271202 ".* (271202|271202 .+)";
        as-path AS271203 ".* (271203|271203 .+)";
        as-path AS271225 ".* (271225|271225 .+)";
        as-path AS271229 ".* (271229|271229 .+)";
        as-path AS271241 ".* (271241|271241 .+)";
        as-path AS271244 ".* (271244|271244 .+)";
        as-path AS271249 ".* (271249|271249 .+)";
        as-path AS271265 ".* (271265|271265 .+)";
        as-path AS271267 ".* (271267|271267 .+)";
        as-path AS271278 ".* (271278|271278 .+)";
        as-path AS271284 ".* (271284|271284 .+)";
        as-path AS271286 ".* (271286|271286 .+)";
        as-path AS271291 ".* (271291|271291 .+)";
        as-path AS271292 ".* (271292|271292 .+)";
        as-path AS271294 ".* (271294|271294 .+)";
        as-path AS271298 ".* (271298|271298 .+)";
        as-path AS271302 ".* (271302|271302 .+)";
        as-path AS271303 ".* (271303|271303 .+)";
        as-path AS271306 ".* (271306|271306 .+)";
        as-path AS271313 ".* (271313|271313 .+)";
        as-path AS271324 ".* (271324|271324 .+)";
        as-path AS271326 ".* (271326|271326 .+)";
        as-path AS271329 ".* (271329|271329 .+)";
        as-path AS271348 ".* (271348|271348 .+)";
        as-path AS271359 ".* (271359|271359 .+)";
        as-path AS271361 ".* (271361|271361 .+)";
        as-path AS271362 ".* (271362|271362 .+)";
        as-path AS271373 ".* (271373|271373 .+)";
        as-path AS271376 ".* (271376|271376 .+)";
        as-path AS271391 ".* (271391|271391 .+)";
        as-path AS271399 ".* (271399|271399 .+)";
        as-path AS271400 ".* (271400|271400 .+)";
        as-path AS271406 ".* (271406|271406 .+)";
        as-path AS271413 ".* (271413|271413 .+)";
        as-path AS271416 ".* (271416|271416 .+)";
        as-path AS271419 ".* (271419|271419 .+)";
        as-path AS271421 ".* (271421|271421 .+)";
        as-path AS271439 ".* (271439|271439 .+)";
        as-path AS271441 ".* (271441|271441 .+)";
        as-path AS271453 ".* (271453|271453 .+)";
        as-path AS271458 ".* (271458|271458 .+)";
        as-path AS271483 ".* (271483|271483 .+)";
        as-path AS271492 ".* (271492|271492 .+)";
        as-path AS271503 ".* (271503|271503 .+)";
        as-path AS271504 ".* (271504|271504 .+)";
        as-path AS271509 ".* (271509|271509 .+)";
        as-path AS271520 ".* (271520|271520 .+)";
        as-path AS271542 ".* (271542|271542 .+)";
        as-path AS271552 ".* (271552|271552 .+)";
        as-path AS271598 ".* (271598|271598 .+)";
        as-path AS271601 ".* (271601|271601 .+)";
        as-path AS271603 ".* (271603|271603 .+)";
        as-path AS271609 ".* (271609|271609 .+)";
        as-path AS271612 ".* (271612|271612 .+)";
        as-path AS271613 ".* (271613|271613 .+)";
        as-path AS271627 ".* (271627|271627 .+)";
        as-path AS271631 ".* (271631|271631 .+)";
        as-path AS271633 ".* (271633|271633 .+)";
        as-path AS271642 ".* (271642|271642 .+)";
        as-path AS271689 ".* (271689|271689 .+)";
        as-path AS271969 ".* (271969|271969 .+)";
        as-path AS272021 ".* (272021|272021 .+)";
        as-path AS272062 ".* (272062|272062 .+)";
        as-path AS272099 ".* (272099|272099 .+)";
        as-path AS272158 ".* (272158|272158 .+)";
        as-path AS272263 ".* (272263|272263 .+)";
        as-path AS272432 ".* (272432|272432 .+)";
        as-path AS272462 ".* (272462|272462 .+)";
        as-path AS272470 ".* (272470|272470 .+)";
        as-path AS272524 ".* (272524|272524 .+)";
        as-path AS272547 ".* (272547|272547 .+)";
        as-path AS272674 ".* (272674|272674 .+)";
        as-path AS272694 ".* (272694|272694 .+)";
        as-path AS272764 ".* (272764|272764 .+)";
        as-path AS273363 ".* (273363|273363 .+)";
        as-path AS273431 ".* (273431|273431 .+)";
        as-path AS273586 ".* (273586|273586 .+)";
        as-path AS273648 ".* (273648|273648 .+)";
        as-path AS273656 ".* (273656|273656 .+)";
        as-path AS273774 ".* (273774|273774 .+)";
        as-path AS273785 ".* (273785|273785 .+)";
        as-path AS273792 ".* (273792|273792 .+)";
        as-path AS27697 ".* (27697|27697 .+)";
        as-path AS27768 ".* (27768|27768 .+)";
        as-path AS27795 ".* (27795|27795 .+)";
        as-path AS28033 ".* (28033|28033 .+)";
        as-path AS28103 ".* (28103|28103 .+)";
        as-path AS28135 ".* (28135|28135 .+)";
        as-path AS28136 ".* (28136|28136 .+)";
        as-path AS28138 ".* (28138|28138 .+)";
        as-path AS28145 ".* (28145|28145 .+)";
        as-path AS28153 ".* (28153|28153 .+)";
        as-path AS28154 ".* (28154|28154 .+)";
        as-path AS28158 ".* (28158|28158 .+)";
        as-path AS28160 ".* (28160|28160 .+)";
        as-path AS28162 ".* (28162|28162 .+)";
        as-path AS28164 ".* (28164|28164 .+)";
        as-path AS28172 ".* (28172|28172 .+)";
        as-path AS28182 ".* (28182|28182 .+)";
        as-path AS28184 ".* (28184|28184 .+)";
        as-path AS28187 ".* (28187|28187 .+)";
        as-path AS28188 ".* (28188|28188 .+)";
        as-path AS28191 ".* (28191|28191 .+)";
        as-path AS28194 ".* (28194|28194 .+)";
        as-path AS28195 ".* (28195|28195 .+)";
        as-path AS28205 ".* (28205|28205 .+)";
        as-path AS28218 ".* (28218|28218 .+)";
        as-path AS28223 ".* (28223|28223 .+)";
        as-path AS28227 ".* (28227|28227 .+)";
        as-path AS28229 ".* (28229|28229 .+)";
        as-path AS28230 ".* (28230|28230 .+)";
        as-path AS28246 ".* (28246|28246 .+)";
        as-path AS28247 ".* (28247|28247 .+)";
        as-path AS28264 ".* (28264|28264 .+)";
        as-path AS28265 ".* (28265|28265 .+)";
        as-path AS28284 ".* (28284|28284 .+)";
        as-path AS28287 ".* (28287|28287 .+)";
        as-path AS28292 ".* (28292|28292 .+)";
        as-path AS28309 ".* (28309|28309 .+)";
        as-path AS28324 ".* (28324|28324 .+)";
        as-path AS28352 ".* (28352|28352 .+)";
        as-path AS28360 ".* (28360|28360 .+)";
        as-path AS28364 ".* (28364|28364 .+)";
        as-path AS28590 ".* (28590|28590 .+)";
        as-path AS28640 ".* (28640|28640 .+)";
        as-path AS28654 ".* (28654|28654 .+)";
        as-path AS28656 ".* (28656|28656 .+)";
        as-path AS373681 ".* (373681|373681 .+)";
        as-path AS52227 ".* (52227|52227 .+)";
        as-path AS52251 ".* (52251|52251 .+)";
        as-path AS52418 ".* (52418|52418 .+)";
        as-path AS52445 ".* (52445|52445 .+)";
        as-path AS52468 ".* (52468|52468 .+)";
        as-path AS52531 ".* (52531|52531 .+)";
        as-path AS52539 ".* (52539|52539 .+)";
        as-path AS52542 ".* (52542|52542 .+)";
        as-path AS52548 ".* (52548|52548 .+)";
        as-path AS52549 ".* (52549|52549 .+)";
        as-path AS52557 ".* (52557|52557 .+)";
        as-path AS52560 ".* (52560|52560 .+)";
        as-path AS52570 ".* (52570|52570 .+)";
        as-path AS52581 ".* (52581|52581 .+)";
        as-path AS52591 ".* (52591|52591 .+)";
        as-path AS52593 ".* (52593|52593 .+)";
        as-path AS52594 ".* (52594|52594 .+)";
        as-path AS52602 ".* (52602|52602 .+)";
        as-path AS52612 ".* (52612|52612 .+)";
        as-path AS52618 ".* (52618|52618 .+)";
        as-path AS52624 ".* (52624|52624 .+)";
        as-path AS52635 ".* (52635|52635 .+)";
        as-path AS52638 ".* (52638|52638 .+)";
        as-path AS52652 ".* (52652|52652 .+)";
        as-path AS52656 ".* (52656|52656 .+)";
        as-path AS52660 ".* (52660|52660 .+)";
        as-path AS52680 ".* (52680|52680 .+)";
        as-path AS52684 ".* (52684|52684 .+)";
        as-path AS52688 ".* (52688|52688 .+)";
        as-path AS52695 ".* (52695|52695 .+)";
        as-path AS52705 ".* (52705|52705 .+)";
        as-path AS52708 ".* (52708|52708 .+)";
        as-path AS52714 ".* (52714|52714 .+)";
        as-path AS52715 ".* (52715|52715 .+)";
        as-path AS52721 ".* (52721|52721 .+)";
        as-path AS52724 ".* (52724|52724 .+)";
        as-path AS52726 ".* (52726|52726 .+)";
        as-path AS52741 ".* (52741|52741 .+)";
        as-path AS52742 ".* (52742|52742 .+)";
        as-path AS52744 ".* (52744|52744 .+)";
        as-path AS52752 ".* (52752|52752 .+)";
        as-path AS52774 ".* (52774|52774 .+)";
        as-path AS52778 ".* (52778|52778 .+)";
        as-path AS52783 ".* (52783|52783 .+)";
        as-path AS52794 ".* (52794|52794 .+)";
        as-path AS52801 ".* (52801|52801 .+)";
        as-path AS52804 ".* (52804|52804 .+)";
        as-path AS52808 ".* (52808|52808 .+)";
        as-path AS52833 ".* (52833|52833 .+)";
        as-path AS52837 ".* (52837|52837 .+)";
        as-path AS52840 ".* (52840|52840 .+)";
        as-path AS52845 ".* (52845|52845 .+)";
        as-path AS52870 ".* (52870|52870 .+)";
        as-path AS52893 ".* (52893|52893 .+)";
        as-path AS52904 ".* (52904|52904 .+)";
        as-path AS52905 ".* (52905|52905 .+)";
        as-path AS52907 ".* (52907|52907 .+)";
        as-path AS52910 ".* (52910|52910 .+)";
        as-path AS52915 ".* (52915|52915 .+)";
        as-path AS52917 ".* (52917|52917 .+)";
        as-path AS52918 ".* (52918|52918 .+)";
        as-path AS52927 ".* (52927|52927 .+)";
        as-path AS52936 ".* (52936|52936 .+)";
        as-path AS52951 ".* (52951|52951 .+)";
        as-path AS52962 ".* (52962|52962 .+)";
        as-path AS52963 ".* (52963|52963 .+)";
        as-path AS52971 ".* (52971|52971 .+)";
        as-path AS52972 ".* (52972|52972 .+)";
        as-path AS52974 ".* (52974|52974 .+)";
        as-path AS52989 ".* (52989|52989 .+)";
        as-path AS53005 ".* (53005|53005 .+)";
        as-path AS53041 ".* (53041|53041 .+)";
        as-path AS53048 ".* (53048|53048 .+)";
        as-path AS53049 ".* (53049|53049 .+)";
        as-path AS53051 ".* (53051|53051 .+)";
        as-path AS53054 ".* (53054|53054 .+)";
        as-path AS53059 ".* (53059|53059 .+)";
        as-path AS53062 ".* (53062|53062 .+)";
        as-path AS53067 ".* (53067|53067 .+)";
        as-path AS53075 ".* (53075|53075 .+)";
        as-path AS53079 ".* (53079|53079 .+)";
        as-path AS53094 ".* (53094|53094 .+)";
        as-path AS53095 ".* (53095|53095 .+)";
        as-path AS53102 ".* (53102|53102 .+)";
        as-path AS53130 ".* (53130|53130 .+)";
        as-path AS53133 ".* (53133|53133 .+)";
        as-path AS53139 ".* (53139|53139 .+)";
        as-path AS53153 ".* (53153|53153 .+)";
        as-path AS53156 ".* (53156|53156 .+)";
        as-path AS53182 ".* (53182|53182 .+)";
        as-path AS53183 ".* (53183|53183 .+)";
        as-path AS53185 ".* (53185|53185 .+)";
        as-path AS53193 ".* (53193|53193 .+)";
        as-path AS53195 ".* (53195|53195 .+)";
        as-path AS53196 ".* (53196|53196 .+)";
        as-path AS53199 ".* (53199|53199 .+)";
        as-path AS53205 ".* (53205|53205 .+)";
        as-path AS53214 ".* (53214|53214 .+)";
        as-path AS53217 ".* (53217|53217 .+)";
        as-path AS53225 ".* (53225|53225 .+)";
        as-path AS61512 ".* (61512|61512 .+)";
        as-path AS61577 ".* (61577|61577 .+)";
        as-path AS61586 ".* (61586|61586 .+)";
        as-path AS61594 ".* (61594|61594 .+)";
        as-path AS61595 ".* (61595|61595 .+)";
        as-path AS61598 ".* (61598|61598 .+)";
        as-path AS61599 ".* (61599|61599 .+)";
        as-path AS61632 ".* (61632|61632 .+)";
        as-path AS61636 ".* (61636|61636 .+)";
        as-path AS61637 ".* (61637|61637 .+)";
        as-path AS61650 ".* (61650|61650 .+)";
        as-path AS61658 ".* (61658|61658 .+)";
        as-path AS61684 ".* (61684|61684 .+)";
        as-path AS61685 ".* (61685|61685 .+)";
        as-path AS61699 ".* (61699|61699 .+)";
        as-path AS61706 ".* (61706|61706 .+)";
        as-path AS61708 ".* (61708|61708 .+)";
        as-path AS61717 ".* (61717|61717 .+)";
        as-path AS61718 ".* (61718|61718 .+)";
        as-path AS61719 ".* (61719|61719 .+)";
        as-path AS61723 ".* (61723|61723 .+)";
        as-path AS61724 ".* (61724|61724 .+)";
        as-path AS61734 ".* (61734|61734 .+)";
        as-path AS61737 ".* (61737|61737 .+)";
        as-path AS61743 ".* (61743|61743 .+)";
        as-path AS61749 ".* (61749|61749 .+)";
        as-path AS61753 ".* (61753|61753 .+)";
        as-path AS61754 ".* (61754|61754 .+)";
        as-path AS61755 ".* (61755|61755 .+)";
        as-path AS61775 ".* (61775|61775 .+)";
        as-path AS61776 ".* (61776|61776 .+)";
        as-path AS61782 ".* (61782|61782 .+)";
        as-path AS61796 ".* (61796|61796 .+)";
        as-path AS61799 ".* (61799|61799 .+)";
        as-path AS61829 ".* (61829|61829 .+)";
        as-path AS61831 ".* (61831|61831 .+)";
        as-path AS61839 ".* (61839|61839 .+)";
        as-path AS61851 ".* (61851|61851 .+)";
        as-path AS61857 ".* (61857|61857 .+)";
        as-path AS61858 ".* (61858|61858 .+)";
        as-path AS61873 ".* (61873|61873 .+)";
        as-path AS61876 ".* (61876|61876 .+)";
        as-path AS61882 ".* (61882|61882 .+)";
        as-path AS61890 ".* (61890|61890 .+)";
        as-path AS61892 ".* (61892|61892 .+)";
        as-path AS61896 ".* (61896|61896 .+)";
        as-path AS61917 ".* (61917|61917 .+)";
        as-path AS61918 ".* (61918|61918 .+)";
        as-path AS61919 ".* (61919|61919 .+)";
        as-path AS61937 ".* (61937|61937 .+)";
        as-path AS61942 ".* (61942|61942 .+)";
        as-path AS61694 ".* (61694|61694 .+)";
        as-path AS271201 ".* (271201|271201 .+)";
        as-path AS270779 ".* (270779|270779 .+)";
        as-path AS263841 ".* (263841|263841 .+)";
        as-path AS265909 ".* (265909|265909 .+)";
        as-path AS267481 ".* (267481|267481 .+)";
        as-path AS262312 ".* (262312|262312 .+)";
        as-path AS273618 ".* (273618|273618 .+)";
        as-path AS272218 ".* (272218|272218 .+)";
        as-path AS263478 ".* (263478|263478 .+)";
        as-path AS271108 ".* (271108|271108 .+)";
        as-path AS265025 ".* (265025|265025 .+)";
        as-path AS263453 ".* (263453|263453 .+)";
        as-path AS263519 ".* (263519|263519 .+)";
        as-path AS268990 ".* (268990|268990 .+)";
        as-path AS271523 ".* (271523|271523 .+)";
        as-path AS272791 ".* (272791|272791 .+)";
        as-path AS274597 ".* (2745975|274597 .+)";
        as-path AS272467 ".* (272467|272467 .+)";
        as-path AS267308 ".* (267308|267308.+)";
        as-path AS52878 ".* (52878|52878 .+)";
        as-path AS271510 ".* (271510|271510 .+)";
        as-path AS263322 ".* (263322|263322 .+)";
        as-path AS274625 ".* (274625|274625 .+)";
    }
}
firewall {
    family inet {
        prefix-action management-police-set {
            apply-flags omit;
            policer management-1m;
            count;
            filter-specific;
            subnet-prefix-length 24;
            destination-prefix-length 32;
        }
        prefix-action management-high-police-set {
            apply-flags omit;
            policer management-5m;
            count;
            filter-specific;
            subnet-prefix-length 24;
            destination-prefix-length 32;
        }
        filter CORERO-clean {
            term redirect {
                then {
                    count ACCEPT-DDOS-CLEAN-CORERO-SP4;
                    routing-instance DDOS-CLEAN-CORERO-SP4;
                }
            }
        }
        filter DDOS-ACCEPT {
            term DDOS-ACCEPT-PROTO-OK {
                filter DDOS-ACCEPT-PROTO-OK;
            }
            term ACCEPT-OTHER {
                then {
                    count ACCEPT-OTHER;
                    accept;
                }
            }
        }
        filter DDOS-ACCEPT-LOCAL {
            term ACCEPT-LOCAL {
                from {
                    source-prefix-list {
                        router-ipv4;
                    }
                }
                then {
                    count ACCEPT-LOCAL;
                    accept;
                }
            }
        }
        filter DDOS-ACCEPT-PROTO-OK {
            term ACCEPT-TCP {
                from {
                    protocol tcp;
                }
                then {
                    count ACCEPT-TCP;
                    accept;
                }
            }
            term ACCEPT-UDP-FRAG {
                from {
                    is-fragment;
                    protocol udp;
                }
                then {
                    count ACCEPT-UDP-FRAG;
                    accept;
                }
            }
            term ACCEPT-UDP {
                from {
                    protocol udp;
                }
                then {
                    count ACCEPT-UDP;
                    accept;
                }
            }
            term ACCEPT-ICMP {
                from {
                    protocol icmp;
                }
                then {
                    count ACCEPT-ICMP;
                    accept;
                }
            }
            term ACCEPT-IGMP {
                from {
                    protocol igmp;
                }
                then {
                    count ACCEPT-IGMP;
                    accept;
                }
            }
            term ACCEPT-GRE {
                from {
                    protocol gre;
                }
                then {
                    count ACCEPT-GRE;
                    accept;
                }
            }
            term ACCEPT-IPIP {
                from {
                    protocol ipip;
                }
                then {
                    count ACCEPT-IPIP;
                    accept;
                }
            }
            term ACCEPT-ESP {
                from {
                    protocol esp;
                }
                then {
                    count ACCEPT-ESP;
                    accept;
                }
            }
        }
        filter DDOS-ACCEPT-QUIC {
            term ACCEPT-QUIC {
                from {
                    protocol udp;
                    source-port 443;
                }
                then {
                    count ACCEPT-QUIC;
                    accept;
                }
            }
        }
        filter DDOS-AVANCADO {
            term LIMIT-COAP {
                from {
                    protocol udp;
                    source-port 5683;
                }
                then {
                    policer POLICER-DDOS-COAP;
                    count ACCEPT-LIMIT-COAP;
                    accept;
                }
            }
            term LIMIT-SADP {
                from {
                    protocol udp;
                    source-port 37020;
                }
                then {
                    policer POLICER-DDOS-SADP;
                    count ACCEPT-LIMIT-SADP;
                    accept;
                }
            }
            term LIMIT-APPLE-RDP {
                from {
                    protocol udp;
                    source-port 3283;
                }
                then {
                    policer POLICER-DDOS-APPLE-RDP;
                    count ACCEPT-LIMIT-APPLE-RDP;
                    accept;
                }
            }
            term "LIMIT-PKTSIZE-TCP-ACK-!SYN-52" {
                from {
                    packet-length 52;
                    protocol tcp;
                    tcp-flags "(ack & !syn)";
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-52;
                    count "ACCEPT-LIMIT-PKTSIZE-ACK-!SYN-52";
                }
            }
            term LIMIT-PKTSIZE-TCP-52 {
                from {
                    packet-length 52;
                    protocol tcp;
                    tcp-flags "(syn & ack)";
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-52;
                    count ACCEPT-LIMIT-PKTSIZE-52;
                }
            }
            term LIMIT-PKTSIZE-TCP-64 {
                from {
                    packet-length 64;
                    protocol tcp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-64;
                    count ACCEPT-LIMIT-PKTSIZE-64;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-988 {
                from {
                    packet-length 988;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-988;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-795 {
                from {
                    packet-length 795;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-795;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-400-499 {
                from {
                    packet-length 400-499;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-400-499;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-500-599 {
                from {
                    packet-length 500-599;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-500-599;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-600-699 {
                from {
                    packet-length 600-699;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-600-699;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-700-799 {
                from {
                    packet-length 700-799;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-700-799;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-800-899 {
                from {
                    packet-length 800-899;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-800-899;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-900-999 {
                from {
                    packet-length 900-999;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-900-999;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1100-1199 {
                from {
                    packet-length 1100-1199;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-1100-1199;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1200-1299 {
                from {
                    packet-length 1200-1299;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-1200-1299;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1033 {
                from {
                    packet-length 1033;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1033;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1052 {
                from {
                    packet-length 1052;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1052;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1338 {
                from {
                    packet-length 1338;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1338;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1350 {
                from {
                    packet-length 1350;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1350;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1368 {
                from {
                    packet-length 1368;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1368;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1390 {
                from {
                    packet-length 1390;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1390;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1428 {
                from {
                    packet-length 1428;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-2G5;
                    count ACCEPT-LIMIT-PKTSIZE-1428;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1400-1440 {
                from {
                    packet-length 1400-1440;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-RANGE;
                    count ACCEPT-LIMIT-PKTSIZE-1400-1440;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1447 {
                from {
                    packet-length 1447;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1447;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1459 {
                from {
                    packet-length 1459;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1459;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-1476 {
                from {
                    packet-length 1476;
                    protocol udp;
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE-1476;
                    accept;
                }
            }
            term ACCEPT-GRE {
                from {
                    source-prefix-list {
                        GRE-EXCEPT;
                    }
                    protocol gre;
                }
                then {
                    count ACCEPT-GRE;
                    accept;
                }
            }
            term LIMIT-GRE {
                from {
                    protocol gre;
                }
                then {
                    policer POLICER-DDOS-GRE;
                    count ACCEPT-LIMIT-GRE;
                    accept;
                }
            }
            term DDOS-LIMIT-ICMP {
                from {
                    protocol icmp;
                    source-port 771;
                }
                then {
                    policer POLICER-DDOS-ICMP-PORT-UNREACH;
                    count ACCEPT-LIMIT-ICMP-PORT-UNREACH;
                    accept;
                }
            }
        }
        filter DDOS-BASICO {
            term DDOS-ACCEPT-LOCAL {
                filter DDOS-ACCEPT-LOCAL;
            }
            term DDOS-LIMIT-DNS {
                filter DDOS-LIMIT-DNS;
            }
            term DDOS-LIMIT-NTP {
                filter DDOS-LIMIT-NTP;
            }
            term DDOS-ACCEPT-QUIC {
                filter DDOS-ACCEPT-QUIC;
            }
            term DDOS-DROP-PORT-0 {
                filter DDOS-DROP-PORT-0;
            }
            term DDOS-TCP-FLAGS {
                filter DDOS-TCP-FLAGS;
            }
            term DDOS-DROP-CHARGEN {
                filter DDOS-DROP-CHARGEN;
            }
            term DDOS-DROP-SLP {
                filter DDOS-DROP-SLP;
            }
            term DDOS-DROP-CLDAP {
                filter DDOS-DROP-CLDAP;
            }
            term DDOS-DROP-SSDP {
                filter DDOS-DROP-SSDP;
            }
            term DDOS-DROP-PROTO-0 {
                filter DDOS-DROP-PROTO-0;
            }
            term DDOS-DROP-MEMCACHED {
                filter DDOS-DROP-MEMCACHED;
            }
            term DDOS-LIMIT-SNMP {
                filter DDOS-LIMIT-SNMP;
            }
        }
        filter DDOS-CONECTAMG {
            term ACCEPT-DNS-RECURSIVE {
                from {
                    destination-address {
                        186.235.62.10/32;
                        186.235.60.20/32;
                        181.233.167.244/32;
                        181.233.167.245/32;
                        191.37.16.1/32;
                        191.37.23.0/32;
                        189.51.96.23/32;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    count ACCEPT-DNS-RECURSIVE;
                    accept;
                }
            }
            term IPs_NAO_MITIGADOS {
                from {
                    destination-address {
                        0.0.0.0/0;
                        189.51.96.0/19 except;
                        186.235.60.0/22 except;
                        45.183.8.0/22 except;
                        191.36.240.0/20 except;
                        45.229.152.0/22 except;
                        191.37.16.0/21 except;
                        181.233.164.0/22 except;
                        45.231.56.0/22 except;
                        179.127.240.0/21 except;
                        143.255.208.0/22 except;
                        177.85.104.0/21 except;
                        192.144.120.0/22 except;
                        38.56.246.0/23 except;
                    }
                }
                then {
                    count PASS-NAO_MITIGADOS;
                    accept;
                }
            }
            inactive: term LIMIT-PKTSIZE {
                from {
                    packet-length [ 457 540 1052 1338 1350 1348 1368 1390 ];
                }
                then {
                    policer POLICER-DDOS-PKTSIZE;
                    count ACCEPT-LIMIT-PKTSIZE;
                    accept;
                }
            }
            term DDOS-LIMIT-GRE {
                filter DDOS-LIMIT-GRE;
            }
        }
        filter DDOS-DROP-CHARGEN {
            term DROP-CHARGEN {
                from {
                    protocol udp;
                    source-port 19;
                }
                then {
                    count DROP-CHARGEN;
                    discard;
                }
            }
        }
        filter DDOS-DROP-CLDAP {
            term DROP-CLDAP {
                from {
                    protocol udp;
                    source-port 389;
                }
                then {
                    count DROP-CLDAP;
                    discard;
                }
            }
        }
        filter DDOS-DROP-DNS {
            term ACCEPT-DNS {
                from {
                    source-prefix-list {
                        DNS-PUBLIC-RESOLVER;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    count ACCEPT-DNS-PUBLIC;
                    accept;
                }
            }
            term DROP-DNS {
                from {
                    protocol udp;
                    source-port 53;
                }
                then {
                    count DROP-DNS;
                    discard;
                }
            }
        }
        filter DDOS-DROP-ICMP-FRAG {
            term DROP-ICMP-FRAG {
                from {
                    is-fragment;
                    protocol icmp;
                }
                then {
                    count DROP-ICMP-FRAG;
                    discard;
                }
            }
        }
        filter DDOS-DROP-LDAP {
            term DROP-MEMCACHED {
                from {
                    protocol udp;
                    source-port 11211;
                }
                then {
                    count DROP-MEMCACHED;
                    discard;
                }
            }
        }
        filter DDOS-DROP-MEMCACHED {
            term DROP-MEMCACHED {
                from {
                    protocol udp;
                    source-port 11211;
                }
                then {
                    count DROP-MEMCACHED;
                    discard;
                }
            }
        }
        filter DDOS-DROP-NTP {
            term ACCEPT-NTP {
                from {
                    source-prefix-list {
                        NTP-PUBLIC;
                    }
                    protocol udp;
                    source-port 123;
                }
                then {
                    count ACCEPT-NTP-PUBLIC;
                    accept;
                }
            }
            term DROP-NTP {
                from {
                    protocol udp;
                    source-port 123;
                }
                then {
                    count DROP-NTP;
                    discard;
                }
            }
        }
        filter DDOS-DROP-OTHER-PROTOCOLS {
            term DROP-OTHER-PROTOCOLS {
                then {
                    count DROP-OTHER-PROTOCOLS;
                    discard;
                }
            }
        }
        filter DDOS-DROP-PORT-0 {
            term DROP-UDP-SPORT-0 {
                from {
                    protocol udp;
                    source-port 0;
                }
                then {
                    policer POLICER-DDOS-PORT0;
                    count ACCEPT-LIMIT-UDP-SPORT-0;
                    accept;
                }
            }
            term DROP-UDP-DPORT-0 {
                from {
                    protocol udp;
                    destination-port 0;
                }
                then {
                    policer POLICER-DDOS-PORT0;
                    count ACCEPT-LIMIT-UDP-DPORT-0;
                    accept;
                }
            }
            term DROP-TCP-SPORT-0 {
                from {
                    protocol tcp;
                    source-port 0;
                }
                then {
                    count DROP-TCP-SPORT-0;
                    discard;
                }
            }
            term DROP-TCP-DPORT-0 {
                from {
                    protocol tcp;
                    destination-port 0;
                }
                then {
                    count DROP-TCP-DPORT-0;
                    discard;
                }
            }
        }
        filter DDOS-DROP-PROTO-0 {
            term DDOS-DROP-PROTO-0 {
                from {
                    protocol 0;
                }
                then {
                    count DROP-PROTO-0;
                    discard;
                }
            }
        }
        filter DDOS-DROP-SLP {
            term DROP-SLP {
                from {
                    protocol udp;
                    source-port [ 427 19 ];
                }
                then {
                    count DROP-SLP;
                    discard;
                }
            }
        }
        filter DDOS-DROP-SNMP {
            term DROP-SNMP {
                from {
                    protocol udp;
                    source-port 161;
                }
                then {
                    count DROP-SNMP;
                    discard;
                }
            }
        }
        filter DDOS-DROP-SSDP {
            term DROP-SSDP-SRC {
                from {
                    protocol udp;
                    source-port 1900;
                }
                then {
                    count DROP-SSDP-SRC;
                    discard;
                }
            }
            term DROP-SSDP-DST {
                from {
                    protocol udp;
                    destination-port 1900;
                }
                then {
                    count DROP-SSDP-DST;
                    discard;
                }
            }
        }
        filter DDOS-FUTURANET {
            term ACCEPT-DNS-RECURSIVE {
                from {
                    destination-address {
                        128.201.141.91/32;
                        128.201.140.251/32;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    count ACCEPT-DNS-RECURSIVE;
                    accept;
                }
            }
            term IPs_NAO_MITIGADOS {
                from {
                    destination-address {
                        0.0.0.0/0;
                        38.250.197.0/24 except;
                        128.201.140.0/22 except;
                        186.216.44.0/24 except;
                    }
                }
                then {
                    count PASS-NAO_MITIGADOS;
                    accept;
                }
            }
            term DROP-ICMP-769 {
                from {
                    protocol icmp;
                    port 769;
                }
                then {
                    count DROP-ICMP-769;
                    log;
                    syslog;
                    discard;
                }
            }
            term DROP-ICMP-2816 {
                from {
                    protocol icmp;
                    port 2816;
                }
                then {
                    count DROP-ICMP-2816;
                    log;
                    syslog;
                    discard;
                }
            }
            term DROP-ICMP-781 {
                from {
                    port 781;
                }
                then {
                    count DROP-ICMP-781;
                    log;
                    syslog;
                    discard;
                }
            }
            term DROP-ICMP-768 {
                from {
                    protocol icmp;
                    port 768;
                }
                then {
                    count DROP-ICMP-768;
                    log;
                    syslog;
                    discard;
                }
            }
            term DROP-ICMP-2048 {
                from {
                    protocol icmp;
                    port 2048;
                }
                then {
                    count DROP-ICMP-2048;
                    log;
                    syslog;
                    discard;
                }
            }
            term DDOS-LIMIT-GRE {
                filter DDOS-LIMIT-GRE;
            }
            term TCP_SYN_ACK {
                from {
                    tcp-flags "(syn & ack)";
                }
                then {
                    policer POLICER-DDOS-TCP_SYN_ACK;
                    count ACCEPT-LIMIT-TCP_SYN_ACK;
                    accept;
                }
            }
            term LIMIT-PKTSIZE-TCP-60 {
                from {
                    packet-length 60;
                    protocol tcp;
                    tcp-flags "(syn & ack)";
                }
                then {
                    policer POLICER-DDOS-PKTSIZE-60;
                    count ACCEPT-LIMIT-PKTSIZE-60;
                    accept;
                }
            }
        }
        filter DDOS-LIMIT-DNS {
            term ACCEPT-DNS {
                from {
                    source-prefix-list {
                        DNS-PUBLIC-RESOLVER;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    count ACCEPT-DNS-PUBLIC;
                    accept;
                }
            }
            term LIMIT-DNS {
                from {
                    protocol udp;
                    source-port 53;
                }
                then {
                    policer POLICER-DDOS-DNS;
                    count ACCEPT-LIMIT-DNS;
                    accept;
                }
            }
        }
        filter DDOS-LIMIT-GRE {
            term ACCEPT-GRE {
                from {
                    source-prefix-list {
                        GRE-EXCEPT;
                    }
                    protocol gre;
                }
                then {
                    count ACCEPT-GRE;
                    accept;
                }
            }
            term LIMIT-GRE {
                from {
                    protocol gre;
                }
                then {
                    policer POLICER-DDOS-GRE;
                    count ACCEPT-LIMIT-GRE;
                    accept;
                }
            }
        }
        filter DDOS-LIMIT-ICMP {
            term LIMIT-ICMP-PORT-UNREACH {
                from {
                    protocol icmp;
                    source-port 771;
                }
                then {
                    policer POLICER-DDOS-ICMP-PORT-UNREACH;
                    count ACCEPT-LIMIT-ICMP-PORT-UNREACH;
                    accept;
                }
            }
        }
        filter DDOS-LIMIT-NTP {
            term ACCEPT-NTP {
                from {
                    source-prefix-list {
                        NTP-PUBLIC;
                    }
                    protocol udp;
                    source-port 123;
                }
                then {
                    count ACCEPT-NTP-PUBLIC;
                    accept;
                }
            }
            term LIMIT-NTP {
                from {
                    protocol udp;
                    source-port 123;
                }
                then {
                    policer POLICER-DDOS-NTP;
                    count ACCEPT-LIMIT-NTP;
                    accept;
                }
            }
        }
        filter DDOS-LIMIT-SNMP {
            term LIMIT-SNMP {
                from {
                    protocol udp;
                    source-port 161;
                }
                then {
                    policer POLICER-DDOS-SNMP;
                    count ACCEPT-LIMIT-SNMP;
                    accept;
                }
            }
        }
        filter DDOS-MEGANET {
            inactive: term IPs_NAO_MITIGADOS {
                from {
                    destination-address {
                        0.0.0.0/0;
                        45.170.196.0/22 except;
                    }
                }
                then {
                    count PASS-NAO_MITIGADOS;
                    accept;
                }
            }
            term DDOS-AVANCADO {
                filter DDOS-AVANCADO;
            }
        }
        filter DDOS-MEGATELECOM {
            inactive: term IPs_NAO_MITIGADOS {
                from {
                    destination-address {
                        0.0.0.0/0;
                    }
                }
                then {
                    count PASS-NAO_MITIGADOS;
                    accept;
                }
            }
        }
        filter DDOS-OPENX {
            term ACCEPT-DNS-RECURSIVE {
                from {
                    destination-address {
                        177.91.160.99/32;
                        177.91.160.100/32;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    count ACCEPT-DNS-RECURSIVE;
                    accept;
                }
            }
            term IPs_NAO_MITIGADOS {
                from {
                    destination-address {
                        0.0.0.0/0;
                        177.91.160.0/22 except;
                        138.36.164.0/22 except;
                    }
                }
                then accept;
            }
        }
        filter DDOS-TCP-FLAGS {
            term FIN_SYN {
                from {
                    tcp-flags "(fin & syn)";
                }
                then {
                    count DROP-TCP_FIN_SYN;
                    discard;
                }
            }
            term "FIN_!ACK" {
                from {
                    tcp-flags "(fin & !ack)";
                }
                then {
                    count "DROP-TCP_FIN_!ACK";
                    discard;
                }
            }
            term FIN_RST {
                from {
                    tcp-flags "(fin & rst)";
                }
                then {
                    count DROP-TCP_FIN_RST;
                    discard;
                }
            }
            term "!FIN_!SYN_!RST_!ACK" {
                from {
                    tcp-flags "(!fin & !syn & !rst & !ack)";
                }
                then {
                    count "DROP-TCP_!FIN_!SYN_!RST_!ACK";
                    discard;
                }
            }
            term SYN_RST {
                from {
                    tcp-flags "(syn & rst)";
                }
                then {
                    count DROP-TCP_SYN_RST;
                    discard;
                }
            }
            term FIN_URG {
                from {
                    tcp-flags "(fin & urg)";
                }
                then {
                    count DROP-TCP_FIN_URG;
                    discard;
                }
            }
            term RST_URG {
                from {
                    tcp-flags "(rst & urg)";
                }
                then {
                    count DROP-TCP_RST_URG;
                    discard;
                }
            }
            term PSH {
                from {
                    tcp-flags "(psh & !ack)";
                }
                then {
                    policer POLICER-DDOS-TCP_PSH;
                    count "ACCEPT-LIMIT-TCP_PSH_!ACK";
                }
            }
            term URG {
                from {
                    tcp-flags urg;
                }
                then {
                    policer POLICER-DDOS-TCP_URG;
                    count ACCEPT-LIMIT-TCP_URG;
                }
            }
        }
        filter PTT-IN {
            term drop {
                from {
                    destination-prefix-list {
                        router-ipv4;
                    }
                    protocol udp;
                    port [ ntp snmp ];
                }
                then {
                    discard;
                }
            }
            term accept {
                then accept;
            }
        }
        filter accept-all {
            apply-flags omit;
            term accept-all-tcp {
                from {
                    protocol tcp;
                }
                then {
                    count accept-all-tcp;
                    accept;
                }
            }
            term accept-all-udp {
                from {
                    protocol udp;
                }
                then {
                    count accept-all-udp;
                    accept;
                }
            }
            term accept-all-igmp {
                from {
                    protocol igmp;
                }
                then {
                    count accept-all-igmp;
                    accept;
                }
            }
            term accept-icmp {
                from {
                    protocol icmp;
                }
                then {
                    count accept-all-icmp;
                    accept;
                }
            }
            term accept-all-unknown {
                then {
                    count accept-all-unknown;
                    accept;
                }
            }
        }
        filter accept-bfd {
            apply-flags omit;
            term accept-bfd {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    source-port 49152-65535;
                    destination-port 3784-3785;
                }
                then {
                    count accept-bfd;
                    accept;
                }
            }
        }
        filter accept-bgp {
            apply-flags omit;
            term accept-bgp {
                from {
                    source-prefix-list {
                        bgp-neighbors;
                        bgp-neighbors-logical-systems;
                        bgp-neighbors-routing-instances;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    port bgp;
                }
                then {
                    count accept-bgp;
                    accept;
                }
            }
            term accept-bmp {
                from {
                    source-prefix-list {
                        bgp-neighbors;
                        bgp-neighbors-logical-systems;
                        bgp-neighbors-routing-instances;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    port 7854;
                }
                then {
                    count accept-bmp;
                    accept;
                }
            }
        }
        filter accept-common-services {
            apply-flags omit;
            term accept-icmp {
                filter accept-icmp;
            }
            term accept-traceroute {
                filter accept-traceroute;
            }
            term accept-ssh {
                filter accept-ssh;
            }
            term accept-snmp {
                filter accept-snmp;
            }
            term accept-ntp {
                filter accept-ntp;
            }
            term accept-web {
                filter accept-web;
            }
            term accept-dns {
                filter accept-dns;
            }
            term accept-rtr {
                filter accept-rtr;
            }
        }
        filter accept-dns {
            apply-flags omit;
            term accept-dns {
                from {
                    source-prefix-list {
                        dns-servers;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    policer management-1m;
                    count accept-dns;
                    accept;
                }
            }
        }
        filter accept-established {
            apply-flags omit;
            term accept-established-tcp-ssh {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    source-port ssh;
                    tcp-established;
                }
                then {
                    policer management-5m;
                    count accept-established-tcp-ssh;
                    accept;
                }
            }
            term accept-established-tcp-ftp {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    source-port ftp;
                    tcp-established;
                }
                then {
                    policer management-5m;
                    count accept-established-tcp-ftp;
                    accept;
                }
            }
            term accept-established-tcp-ftp-data-syn {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    source-port ftp-data;
                    tcp-initial;
                }
                then {
                    policer management-5m;
                    count accept-established-tcp-ftp-data-syn;
                    accept;
                }
            }
            term accept-established-tcp-ftp-data {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    source-port ftp-data;
                    tcp-established;
                }
                then {
                    policer management-5m;
                    count accept-established-tcp-ftp-data;
                    accept;
                }
            }
            term accept-established-tcp-telnet {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    source-port telnet;
                    tcp-established;
                }
                then {
                    policer management-5m;
                    count accept-established-tcp-telnet;
                    accept;
                }
            }
            term accept-established-tcp-fetch {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    source-port [ http https ];
                    tcp-established;
                }
                then {
                    policer management-5m;
                    count accept-established-tcp-fetch;
                    accept;
                }
            }
            term accept-established-udp-ephemeral {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    destination-port 49152-65535;
                }
                then {
                    policer management-5m;
                    count accept-established-udp-ephemeral;
                    accept;
                }
            }
        }
        filter accept-ftp {
            apply-flags omit;
            term accept-ftp {
                from {
                    source-prefix-list {
                        rfc1918;
                        gerencia_openx;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    port [ ftp ftp-data ];
                }
                then {
                    policer management-5m;
                    count accept-ftp;
                    accept;
                }
            }
        }
        filter accept-icmp {
            apply-flags omit;
            term no-icmp-fragments {
                from {
                    is-fragment;
                    protocol icmp;
                }
                then {
                    count no-icmp-fragments;
                    discard;
                }
            }
            term accept-icmp {
                from {
                    protocol icmp;
                    ttl-except 1;
                    icmp-type [ echo-reply echo-request time-exceeded unreachable source-quench router-advertisement parameter-problem ];
                }
                then {
                    policer management-5m;
                    count accept-icmp;
                    accept;
                }
            }
        }
        filter accept-igp {
            apply-flags omit;
            term accept-ospf {
                filter accept-ospf;
            }
            term accept-rip {
                filter accept-rip;
            }
        }
        filter accept-ldp {
            apply-flags omit;
            term accept-ldp-discover {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    destination-prefix-list {
                        multicast-all-routers;
                    }
                    protocol udp;
                    destination-port ldp;
                }
                then {
                    count accept-ldp-discover;
                    accept;
                }
            }
            term accept-ldp-unicast {
                from {
                    source-prefix-list {
                        ldp-peers;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    port ldp;
                }
                then {
                    count accept-ldp-unicast;
                    accept;
                }
            }
            term accept-tldp-discover {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    destination-port ldp;
                }
                then {
                    count accept-tldp-discover;
                    accept;
                }
            }
            term accept-ldp-igmp {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    destination-prefix-list {
                        multicast-all-routers;
                    }
                    protocol igmp;
                }
                then {
                    count accept-ldp-igmp;
                    accept;
                }
            }
        }
        filter accept-ldp-rsvp {
            apply-flags omit;
            term accept-ldp {
                filter accept-ldp;
            }
            term accept-rsvp {
                filter accept-rsvp;
            }
        }
        filter accept-ntp {
            apply-flags omit;
            term accept-ntp {
                from {
                    source-prefix-list {
                        ntp-server;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    port ntp;
                }
                then {
                    policer management-1m;
                    count accept-ntp;
                    accept;
                }
            }
            term accept-ntp-peer {
                from {
                    source-prefix-list {
                        ntp-server-peers;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    destination-port ntp;
                }
                then {
                    policer management-1m;
                    count accept-ntp-peer;
                    accept;
                }
            }
            term accept-ntp-server {
                from {
                    source-prefix-list {
                        rfc1918;
                        gerencia_openx;
                        ntp-server;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    destination-port ntp;
                }
                then {
                    policer management-1m;
                    count accept-ntp-server;
                    accept;
                }
            }
            term accept-ntp-local {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    port ntp;
                }
                then {
                    policer management-1m;
                    count accept-ntp-local;
                    accept;
                }
            }
        }
        filter accept-ospf {
            apply-flags omit;
            term accept-ospf {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                        ospf;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        ospf;
                        router-ipv4-logical-systems;
                    }
                    protocol ospf;
                }
                then {
                    count accept-ospf;
                    accept;
                }
            }
        }
        filter accept-radius {
            apply-flags omit;
            term accept-radius {
                from {
                    source-prefix-list {
                        radius-servers;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    source-port [ radacct radius ];
                    tcp-established;
                }
                then {
                    policer management-1m;
                    count accept-radius;
                    accept;
                }
            }
        }
        filter accept-remote-auth {
            apply-flags omit;
            term accept-radius {
                filter accept-radius;
            }
            term accept-tacacs {
                filter accept-tacacs;
            }
        }
        filter accept-rip {
            apply-flags omit;
            term accept-rip {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    destination-prefix-list {
                        rip;
                    }
                    protocol udp;
                    destination-port rip;
                }
                then {
                    count accept-rip;
                    accept;
                }
            }
            term accept-rip-igmp {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    destination-prefix-list {
                        rip;
                    }
                    protocol igmp;
                }
                then {
                    count accept-rip-igmp;
                    accept;
                }
            }
        }
        filter accept-rsvp {
            apply-flags omit;
            term accept-rsvp {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol rsvp;
                }
                then {
                    count accept-rsvp;
                    accept;
                }
            }
        }
        filter accept-rtr {
            apply-flags omit;
            term accept-rtr {
                from {
                    source-prefix-list {
                        rfc1918;
                        gerencia_openx;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    source-port 3323;
                }
                then {
                    policer management-5m;
                    count accept-rtr;
                    accept;
                }
            }
        }
        filter accept-snmp {
            apply-flags omit;
            term accept-snmp {
                from {
                    source-prefix-list {
                        snmp-client-lists;
                        snmp-community-clients;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    destination-port snmp;
                }
                then {
                    policer management-5m;
                    count accept-snmp;
                    accept;
                }
            }
        }
        filter accept-ssh {
            apply-flags omit;
            term accept-ssh {
                from {
                    source-prefix-list {
                        rfc1918;
                        gerencia_openx;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    destination-port [ ssh 830 5612 32767 ];
                }
                then {
                    policer management-5m;
                    count accept-ssh;
                    accept;
                }
            }
        }
        filter accept-tacacs {
            apply-flags omit;
            term accept-tacacs {
                from {
                    source-prefix-list {
                        tacacs-servers;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol [ tcp udp ];
                    source-port [ tacacs tacacs-ds ];
                    tcp-established;
                }
                then {
                    policer management-1m;
                    count accept-tacacs;
                    accept;
                }
            }
        }
        filter accept-telnet {
            apply-flags omit;
            term accept-telnet {
                from {
                    source-prefix-list {
                        rfc1918;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    destination-port telnet;
                }
                then {
                    policer management-1m;
                    count accept-telnet;
                    accept;
                }
            }
        }
        filter accept-traceroute {
            apply-flags omit;
            term accept-traceroute-udp {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol udp;
                    ttl 1;
                    destination-port 33435-33450;
                }
                then {
                    policer management-1m;
                    count accept-traceroute-udp;
                    accept;
                }
            }
            term accept-traceroute-icmp {
                from {
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol icmp;
                    ttl 1;
                    icmp-type [ echo-request timestamp time-exceeded ];
                }
                then {
                    policer management-1m;
                    count accept-traceroute-icmp;
                    accept;
                }
            }
        }
        filter accept-vrrp {
            apply-flags omit;
            term accept-vrrp {
                from {
                    source-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    destination-prefix-list {
                        vrrp;
                    }
                    protocol [ vrrp ah ];
                }
                then {
                    count accept-vrrp;
                    accept;
                }
            }
        }
        filter accept-web {
            apply-flags omit;
            term accept-web {
                from {
                    source-prefix-list {
                        rfc1918;
                        gerencia_openx;
                    }
                    destination-prefix-list {
                        router-ipv4;
                        router-ipv4-logical-systems;
                    }
                    protocol tcp;
                    destination-port [ http https ];
                }
                then {
                    policer management-5m;
                    count accept-web;
                    accept;
                }
            }
        }
        filter discard-all {
            apply-flags omit;
            term discard-ip-options {
                from {
                    ip-options any;
                }
                then {
                    count discard-ip-options;
                    discard;
                }
            }
            term discard-TTL_1-unknown {
                from {
                    ttl 1;
                }
                then {
                    count discard-all-TTL_1-unknown;
                    discard;
                }
            }
            term discard-tcp {
                from {
                    protocol tcp;
                }
                then {
                    count discard-tcp;
                    discard;
                }
            }
            term discard-netbios {
                from {
                    protocol udp;
                    destination-port 137;
                }
                then {
                    count discard-netbios;
                    discard;
                }
            }
            term discard-udp {
                from {
                    protocol udp;
                }
                then {
                    count discard-udp;
                    discard;
                }
            }
            term discard-icmp {
                from {
                    protocol icmp;
                }
                then {
                    count discard-icmp;
                    discard;
                }
            }
            term discard-unknown {
                then {
                    count discard-unknown;
                    discard;
                }
            }
        }
    }
    family inet6 {
        filter V6_PTT-IN {
            term drop {
                from {
                    destination-address {
                        2001:12f8::214:191/128;
                    }
                    destination-port [ ntp snmp ];
                }
                then discard;
            }
            term accept {
                then accept;
            }
        }
    }
    policer ARP_POLICER {
        if-exceeding {
            bandwidth-limit 150k;
            burst-size-limit 250k;
        }
        then discard;
    }
    policer POLICER-DDOS-APPLE-RDP {
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer POLICER-DDOS-COAP {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer POLICER-DDOS-DNS {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 50m;
            burst-size-limit 6250000;
        }
        then discard;
    }
    policer POLICER-DDOS-GRE {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 200m;
            burst-size-limit 1m;
        }
        then discard;
    }
    policer POLICER-DDOS-ICMP-PORT-UNREACH {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer POLICER-DDOS-NTP {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 625k;
        }
        then discard;
    }
    policer POLICER-DDOS-PKTSIZE {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 500m;
            burst-size-limit 6250000;
        }
        then discard;
    }
    policer POLICER-DDOS-PKTSIZE-2G5 {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 2500000000;
            burst-size-limit 31250000;
        }
        then discard;
    }
    policer POLICER-DDOS-PKTSIZE-52 {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 50m;
            burst-size-limit 375k;
        }
        then discard;
    }
    policer POLICER-DDOS-PKTSIZE-60 {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 50m;
            burst-size-limit 375k;
        }
        then discard;
    }
    policer POLICER-DDOS-PKTSIZE-64 {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 15m;
            burst-size-limit 375k;
        }
        then discard;
    }
    policer POLICER-DDOS-PKTSIZE-RANGE {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 500m;
            burst-size-limit 6250000;
        }
        then discard;
    }
    policer POLICER-DDOS-PORT0 {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 100m;
            burst-size-limit 1m;
        }
        then discard;
    }
    policer POLICER-DDOS-SADP {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer POLICER-DDOS-SNMP {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 625k;
        }
        then discard;
    }
    policer POLICER-DDOS-TCP_PSH {
        if-exceeding {
            bandwidth-limit 30m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer POLICER-DDOS-TCP_SYN_ACK {
        if-exceeding {
            bandwidth-limit 100m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer POLICER-DDOS-TCP_URG {
        if-exceeding {
            bandwidth-limit 30m;
            burst-size-limit 125k;
        }
        then discard;
    }
    policer limite_arp_ptt-sp {
        if-exceeding {
            bandwidth-limit 2m;
            burst-size-limit 250k;
        }
        then discard;
    }
    policer management-1m {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 625k;
        }
        then discard;
    }
    policer management-5m {
        apply-flags omit;
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 625k;
        }
        then discard;
    }
    filter RPM-FUTURANET {
        term recos {
            from {
                source-address {
                    138.36.164.201/32;
                }
                destination-address {
                    138.36.164.200/32;
                }
            }
            then {
                loss-priority high;
                forwarding-class network-control;
            }
        }
        term accept {
            then accept;
        }
    }
}
routing-instances {
    CONTEUDO {
        instance-type virtual-router;
        routing-options {
            rib CONTEUDO.inet6.0 {
                static {
                    route 2804:11dc:7000::/36 {
                        discard;
                        community 65444:10000;
                    }
                }
            }
            static {
                route 0.0.0.0/0 next-table inet.0;
            }
            instance-import RI-CONTEUDO;
        }
        protocols {
            bgp {
                group WAN_PTT_SP-V4 {
                    local-preference 350;
                    hold-time 60;
                    import BGP-PTT-SP-in;
                    export BGP-PTT-SP-out;
                    peer-as 26162;
                    neighbor 187.16.216.253 {
                        description PTT-SP-RS1;
                    }
                    neighbor 187.16.216.254 {
                        description PTT-SP-RS2;
                    }
                    neighbor 187.16.216.252 {
                        peer-as 20121;
                    }
                }
                group WAN_PTT_SP-V6 {
                    type external;
                    local-preference 350;
                    hold-time 240;
                    import BGP-PTT-SP-in;
                    export BGP-PTT-SP-out;
                    peer-as 26162;
                    neighbor 2001:12f8::253 {
                        description PTT-SP-RS1;
                    }
                    neighbor 2001:12f8::254 {
                        description PTT-SP-RS2;
                    }
                    neighbor 2001:12f8::252 {
                        peer-as 20121;
                    }
                }
                group WAN_PTT_SP_PEER-V4 {
                    type external;
                    local-preference 350;
                    import BGP-PTT-PEER-in;
                    export BGP-PTT-PEER-out;
                    neighbor 187.16.223.63 {
                        description HYPERFILTER;
                        peer-as 60503;
                    }
                    neighbor 187.16.214.32 {
                        description HYPERFILTER;
                        peer-as 60503;
                    }
                    neighbor 187.16.223.245 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                    neighbor 187.16.223.244 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                    neighbor 187.16.221.28 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                    neighbor 187.16.220.8 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                }
                group WAN_PTT_SP_PEER-V6 {
                    type external;
                    local-preference 350;
                    import BGP-PTT-PEER-in;
                    export BGP-PTT-PEER-out;
                    peer-as 20940;
                    neighbor 2001:12f8::220:8 {
                        description AKAMAI;
                    }
                    neighbor 2001:12f8::223:244 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                    neighbor 2001:12f8::223:245 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                    neighbor 2001:12f8::221:28 {
                        description AKAMAI;
                        peer-as 20940;
                    }
                }
            }
            ospf {
                apply-groups BFD-OSPF;
                area 0.0.0.0 {
                    interface ae2.10045 {
                        interface-type p2p;
                        metric 35;
                    }
                    interface ae2.11045 {
                        interface-type p2p;
                        metric 34;
                    }
                    interface lo0.1 {
                        passive;
                    }
                    interface ae2.10145 {
                        interface-type p2p;
                        metric 34;
                    }
                    interface ae2.11145 {
                        interface-type p2p;
                        metric 35;
                    }
                    interface ae2.10445 {
                        interface-type p2p;
                        metric 15;
                    }
                }
                export OSPF-out;
            }
            ospf3 {
                area 0.0.0.0 {
                    interface ae2.10045 {
                        interface-type p2p;
                        metric 35;
                    }
                    interface ae2.11045 {
                        interface-type p2p;
                        metric 34;
                    }
                }
                export OSPF-out;
            }
        }
        interface ae2.3896;
        interface ae2.3897;
        interface ae2.10045; ## 'ae2.10045' is not defined
        interface ae2.10145; ## 'ae2.10145' is not defined
        interface ae2.10445; ## 'ae2.10445' is not defined
        interface ae2.11045; ## 'ae2.11045' is not defined
        interface ae2.11145; ## 'ae2.11145' is not defined
        interface lo0.1;
    }
    DDOS-CLEAN-CORERO-SP4 {
        instance-type vrf;
        routing-options {
            static {
                route 0.0.0.0/0 next-table inet.0;
            }
        }
        route-distinguisher 65444:1642;
        vrf-target target:65444:1642;
    }
    DDOS-DIRTY-CORERO-SP4 {
        instance-type vrf;
        routing-options {
            static {
                defaults {
                    resolve;
                }
                route 0.0.0.0/0 next-hop 138.36.164.25;
            }
        }
        interface ae2.44; ## 'ae2.44' is not defined
        route-distinguisher 666:1641;
        vrf-target target:666:1641;
    }
    DDOS-DIRTY-CORERO-VBD {
        instance-type vrf;
        route-distinguisher 1642:1621;
        vrf-target target:666:1620;
    }
    mgmt_junos {
        routing-options {
            static {
                route 0.0.0.0/0 next-hop 100.91.244.1;
            }
        }
        description OX-GERENCIA;
    }
}
routing-options {
    rib inet6.0 {
        static {
            route ::/0 discard;
        }
    }
    rib IP.inet6.0;
    router-id 138.36.165.4;
    autonomous-system 263444;
    flow {
        interface-group 1 exclude;
        term-order standard;
    }
    bmp {
        station NOCTION {
            local-address 138.36.165.4;
            connection-mode active;
            station-address 177.91.160.76;
            station-port 7854;
        }
    }
    static {
        route 0.0.0.0/0 discard;
    }
    instance-import RI-MASTER;
    forwarding-table {
        export lb;
    }
    validation {
        group OPENX {
            session 177.91.162.90 {
                port 3323;
                local-address 138.36.165.4;
            }
        }
    }
}
protocols {
    router-advertisement {
        interface fxp0.0;
    }
    bgp {
        group IBGP-V4 {
            type internal;
            local-address 138.36.165.4;
            import IBGP-in;
            family inet {
                unicast;
                flow {
                    no-validate flowspec-in;
                }
            }
            family inet-vpn {
                unicast;
            }
            peer-as 263444;
            neighbor 138.36.164.0;
            neighbor 177.91.162.0;
            inactive: neighbor 138.36.164.38;
            neighbor 177.91.160.76;
            neighbor 177.91.160.0;
            neighbor 138.36.165.0;
            neighbor 138.36.164.35 {
                description OX-SP4-BIRD_FIX;
                hold-time 240;
                export BGP-NEGA-TUDO;
            }
            neighbor 177.91.160.90 {
                description OX-COT-BIRD_FIX;
                hold-time 240;
                export BGP-NEGA-TUDO;
            }
        }
        group IBGP-V6 {
            type internal;
            local-address 2804:11dc:8000::;
            import IBGP-in;
            family inet6 {
                unicast;
                flow {
                    no-validate flowspec-in;
                }
            }
            peer-as 263444;
            neighbor 2804:11dc:4000::0;
            neighbor 2804:11dc:1000::0;
            neighbor 2804:11dc:0000::0;
            neighbor 2804:11dc:2000::0;
        }
        group LG-V4 {
            type internal;
            hold-time 720;
            cluster 138.36.165.4;
            neighbor 208.76.14.223 {
                description Kentik-Detect;
                local-address 138.36.165.4;
                mtu-discovery;
                family inet {
                    unicast;
                    flow {
                        no-validate flowspec-in;
                    }
                }
                family inet-vpn {
                    unicast;
                }
                export KENTIK-OUT;
            }
        }
        group LG-V6 {
            type internal;
            hold-time 720;
            export KENTIK-OUT;
            cluster 138.36.165.4;
            neighbor 2620:129:1:2::1 {
                description Kentik-Detect;
                local-address 2804:11dc:8000::;
                mtu-discovery;
                family inet6 {
                    unicast;
                    flow {
                        no-validate flowspec-in;
                    }
                }
                export KENTIK-OUT;
            }
        }
        group CLI_IP-V4 {
            type external;
            enforce-first-as;
            family inet {
                unicast {
                    prefix-limit {
                        maximum 200;
                        teardown {
                            idle-timeout 10;
                        }
                    }
                }
            }
            export BGP-CLI-OUT-FULL;
            inactive: neighbor 138.36.164.79 {
                description CLI_IP-CONECTAMG-REDECONECT_VL117;
                import CLI_IP-CONECTAMG;
                peer-as 263270;
            }
            neighbor 138.36.165.25 {
                description CLI_IP-FUTURANET-ASC_VL400;
                import CLI_IP-FUTURANET;
                family inet {
                    unicast {
                        prefix-limit {
                            maximum 1000;
                        }
                    }
                }
                peer-as 266631;
            }
            neighbor 138.36.165.27 {
                description CLI_IP-FUTURANET-MEGATELECOM_VL400;
                import CLI_IP-FUTURANET;
                family inet {
                    unicast {
                        prefix-limit {
                            maximum 1000;
                        }
                    }
                }
                peer-as 262663;
            }
            neighbor 138.36.165.29 {
                description CLI_IP-FUTURANET-MEGATELECOM_VL400;
                import CLI_IP-FUTURANET;
                family inet {
                    unicast {
                        prefix-limit {
                            maximum 1000;
                        }
                    }
                }
                peer-as 53225;
            }
            neighbor 138.36.165.39 {
                description CLI_IP-WCM-ASC_VL401;
                import CLI_IP-WCM;
                peer-as 265188;
            }
            neighbor 138.36.165.47 {
                description CLI_IP-VIAFIBRA-ASC_VL446;
                import CLI_IP-VIAFIBRA;
                peer-as 262861;
            }
        }
        group CLI_IP-V6 {
            type external;
            enforce-first-as;
            family inet6 {
                unicast {
                    prefix-limit {
                        maximum 100;
                        teardown {
                            idle-timeout 10;
                        }
                    }
                }
            }
            export BGP-CLI-OUT-FULL;
            inactive: neighbor 2804:11dc:40c0:117::2 {
                description CLI_IP-CONECTAMG-REDECONECT_VL117;
                import CLI_IP-CONECTAMG;
                peer-as 263270;
            }
            neighbor 2804:11dc:30c0:400::2 {
                description CLI_IP-FUTURANET-ASC_VL400;
                import CLI_IP-FUTURANET;
                peer-as 266631;
            }
            neighbor 2804:11dc:80c0:402::2 {
                description CLI_IP-WCM-V6_ASC_VL402;
                import CLI_IP-WCM;
                peer-as 265188;
            }
            neighbor 2804:11dc:80c0:400::2 {
                description CLI_IP-FUTURANET-ASC_VL400;
                import CLI_IP-FUTURANET;
                peer-as 266631;
            }
            neighbor 2804:11dc:30c0:446::2 {
                description CLI_IP-VIAFIBRA-ASC_VL446;
                import CLI_IP-VIAFIBRA;
                peer-as 262861;
            }
        }
        group WAN_PEER-V4 {
            type external;
            family inet {
                unicast;
            }
            local-as 263444;
            neighbor 138.36.165.9 {
                description WAN_PEER-GLOBO-ASC_VL70;
                local-address 138.36.165.8;
                import BGP-PEER-GLOBO-in;
                export BGP-PEER-GLOBO-out;
                peer-as 28604;
            }
        }
        group WAN_PEER-V6 {
            type external;
            family inet6 {
                unicast;
            }
            local-as 263444;
            neighbor 2804:11dc:80c0:70::2 {
                description WAN_PEER-GLOBO-ASC_VL70;
                import BGP-PEER-GLOBO-in;
                export BGP-PEER-GLOBO-out;
                peer-as 28604;
            }
        }
        group ASCENTY-IX-V4 {
            type external;
            local-preference 280;
            import BGP-PTT-AICX-SP-in;
            family inet {
                unicast;
            }
            export BGP-PTT-AICX-SP-out;
            peer-as 52925;
            neighbor 172.29.9.137;
            neighbor 172.29.9.138;
        }
        group ASCENTY-IX-V6 {
            type external;
            local-preference 280;
            import BGP-PTT-AICX-SP-in;
            family inet6 {
                unicast;
            }
            export BGP-PTT-AICX-SP-out;
            peer-as 52925;
            neighbor fd00:2804:ad4:3::189;
            neighbor fd00:2804:ad4:3::18a;
        }
        group WAN_IP-V4 {
            type external;
            local-as 263444;
            neighbor 172.17.1.249 {
                description WAN_IP-PEER1-ASC_VL429;
                import BGP-IP-PEER1-in;
                export BGP-IP-PEER1-out;
                peer-as 1031;
            }
            neighbor 200.170.83.54 {
                description WAN_IP-DURAND-ASC_VL3909;
                import BGP-IP-DURAND-in;
                export BGP-IP-DURAND-out;
                peer-as 22356;
            }
            neighbor 189.1.33.20 {
                description WAN_IP-FLYS-ASC_VL3910;
                import BGP-IP-DURAND-in;
                export BGP-IP-FLYS-out;
                peer-as 28663;
            }
            neighbor 172.16.0.116 {
                description WAN_IP-CDNSTAR-ASC_VL551;
                import BGP-IP-CDNSTAR-in;
                export BGP-IP-CDNSTAR-out;
                peer-as 272713;
            }
            neighbor 199.100.30.64 {
                description WAN_IP-COGENT-ASC;
                import BGP-IP-COGENT-in;
                export BGP-IP-COGENT-out;
                peer-as 174;
            }
        }
        group WAN_IP-V6 {
            type external;
            local-as 263444;
            neighbor 2607:1640:1031::124 {
                description WAN_IP-PEER1-ASC_VL429;
                import BGP-IP-PEER1-in;
                export BGP-IP-PEER1-out;
                peer-as 1031;
            }
            neighbor 2001:129c:0:34::120 {
                description WAN_IP-DURAND-ASC_VL3909;
                import BGP-IP-DURAND-in;
                export BGP-IP-DURAND-out;
                peer-as 22356;
            }
            neighbor 2804:3e8:0:f::30 {
                description WAN_IP-FLYS-ASC_VL3910;
                import BGP-IP-DURAND-in;
                export BGP-IP-FLYS-out;
                peer-as 28663;
            }
            neighbor fc00:8780:1::116 {
                description WAN_IP-CDNSTAR-ASC_VL551;
                import BGP-IP-CDNSTAR-in;
                export BGP-IP-CDNSTAR-out;
                peer-as 272713;
            }
            neighbor 2804:5330:2:8::8:0 {
                description WAN_IP-COGENT-ASC;
                import BGP-IP-COGENT-in;
                export BGP-IP-COGENT-out;
                peer-as 174;
            }
        }
        log-updown;
    }
    ldp {
        transport-address router-id;
        interface ae2.10080;
        interface ae2.10280;
        interface ae2.10480;
        interface ae2.11080;
        interface lo0.0;
        neighbor 138.36.164.0;
        neighbor 177.91.160.0;
        neighbor 177.91.162.0;
    }
    mpls {
        interface lo0.0;
        interface ae2.10480;
        interface ae2.10080;
        interface ae2.10280;
        interface ae2.11080;
    }
    ospf {
        apply-groups BFD-OSPF;
        area 0.0.0.0 {
            interface lo0.0 {
                passive;
            }
            interface ae2.10480 {
                interface-type p2p;
                metric 35;
            }
            interface ae2.10080 {
                interface-type p2p;
                metric 34;
            }
            interface ae2.10280 {
                interface-type p2p;
                metric 15;
            }
            interface ae2.11080 {
                interface-type p2p;
                metric 34;
            }
            interface ae2.26 {
                interface-type p2p;
            }
        }
        export OSPF-out;
    }
    ospf3 {
        area 0.0.0.0 {
            interface ae2.10480 {
                interface-type p2p;
                metric 35;
            }
            interface ae2.10080 {
                interface-type p2p;
                metric 34;
            }
            interface ae2.10280 {
                interface-type p2p;
                metric 15;
            }
            interface ae2.11080 {
                interface-type p2p;
                metric 34;
            }
        }
        export OSPF-out;
    }
    lldp {
        port-id-subtype interface-name;
        port-description-type interface-description;
        interface all;
    }
}