This article explains the scenario in which the following log message is seen.
Firewall process: DFWC_FILTER_LIST_NOT_ALLOWED: Filter 'filter-name' should be attached without a list, it would use less filter-block resources
These log messages are for information only and no action is required when these messages are observed.
The following log message is seen in the syslog/message file.
set interfaces <interface-name> unit 0 family inet filter input <filter-name> set interfaces <interface-name> unit 0 family inet filter input-list <filter-name>
The above log messages are seen when only one filter is applied as input-list/output-list.
The message indicates that the current firewall is applied as a list. However, in this case, a single firewall is being applied to the IFL. Therefore, it is better to apply it directly as a firewall (without the list) to save filter-block resources.
If only one filter is present in the filter list, it is recommended to apply the filter directly rather than as a filter list because a filter list consumes more internal resources.
The log message was implemented in order to improve configuration guidelines.
The messages are for information purposes only and no action is required to resolve this syslog message.
19-04-2022 - Version 1