How to block fragmented packets with a firewall filter on EX Switches
This article provides a basic example for blocking fragmented packets from/to a host. See documentation link provided for additional details related to creating firewall filters.
Fragmented packets coming from a destination can be blocked with the filter given below:
set firewall family inet filter test term fragment from destination-address 95.130.168.194/32 set firewall family inet filter test term fragment from is-fragment set firewall family inet filter test term fragment then discard