Hi Maria, thanks for your explanation. I recently stumbled over the mandatory dst prefix when advertising a flow spec rule from a Juniper device which filters just on the source address. But never mind, now as i know it, i would add a dst prefix of 0/0 in case of source-only based filtering. Regards, Alex