Juniper EX Firewall example

allow internet from 10.16.1.240 and locally but no access to 10/8

set firewall family ethernet-switching filter inet term gw from destination-address 10.16.1.0/24
set firewall family ethernet-switching filter inet term gw then accept
set firewall family ethernet-switching filter inet term 1 from source-address 10.16.1.240/32
set firewall family ethernet-switching filter inet term 1 from destination-address 10.0.0.0/8
set firewall family ethernet-switching filter inet term 1 then discard
set firewall family ethernet-switching filter inet term 2 then accept

set vlans default filter input inet

http://kb.juniper.net/InfoCenter/index?page=content&id=KB24217&actp=search
https://3netcamp.wordpress.com/2012/06/14/access-control-list-firewall-on-ex-juniper/
http://www.dkerr.com/juniper_basic.html
http://www.sharontools.com/blog/tips/juniper-ex-switches-configuration-examples/