The service-filter-hit firewall match condition and the service-filter-hit, force-premium, service-accounting, and service-accounting-deferred firewall actions are extended to the family any filter on routers. This support is in addition to existing support on the family inet and family inet6 filters.