Simple block policy from "external" to "Untrust"?

Hi everyone,

a simple question. I want to block an ip address, that tries to access my juniper directly. It tries to establish a VPN connection. This gets rejected because there is no VPN gateway configured but this message is flooding the logs.

So I just want to block this IP address. The incoming interface is eth0/0 in zone "Untrust". I was not yet able to create a working policy for that. Looks like I'm too stupid.

On a linux server, I would just do a

iptables -A INPUT -i eth0/0 -s <source-ip> -j DROP

Thanks