ge-0/0/5 is the NAS.
I have tried using both input (set from source-address 192.168.1.66/32) and output filters (set from destination-address 192.168.1.66/32). Whenever one of those filters is applied to ge-0/0/5, the NAS on that interface loses connectivity.