Andreas Unterkircher wrote: > I see the problems now with the generated ruleset coming from firehol, > as the RELATED rules does not match this packets - I guess they get > already DROPed somewhere before. > Could you please check that the packet is dropped by firehol? Firehol should log a line about it if it dropped that. Costa