firewall { family inet { filter v4-inbound { term accept-voip { from { protocol udp; destination-port 5061; } then { count accept-voip; accept; } } term police-all { then { policer police-500kbps; count police-all; accept; } } } } policer police-500kbps { if-exceeding { bandwidth-limit 500k; burst-size-limit 50k; } then discard; } }