Ok.. I don't have a lab box to test it but I guess, you should configure "from destination-port" in the term allow-internet, and should apply the filter under family inet hierarchy. i.e. "set interface <interface name> unit <unit no> family inet filter input <filter name>
rest looks good to me.