version 1.0;

ns junos = "http://xml.juniper.net/junos/*/junos";
ns xnm = "http://xml.juniper.net/xnm/1.1/xnm";
ns jcs = "http://xml.juniper.net/junos/commit-scripts/1.0";

import "../import/junos.xsl";

match configuration {

    for-each (protocols/bgp/group/neighbor) {
        var $first = export[position() = 1];

        if ($first) {
            call jcs:emit-change($tag = 'transient-change') {
                with $content = {
                    <export insert="before" name="{$first}"> "DENY_ALL";
                }
            }
        }
    }
}