Sometimes when I boot ASL 5.001 I get all traffic from inside the LAN dropped, even though packet filter rules are OK.
Rebooting the firewall repeatably eventually fixes the problem.
This happens even if I add an Any Any Any rule whilst the system is live.
23:16:49 ACCEPT 203.153.227.210 29096 -> 203.15.140.27 443 TCP SYN
23:16:51 DROP 192.168.2.100 1026 -> 192.168.2.1 53 UDP
23:16:52 DROP 192.168.2.201 1042 -> 128.63.2.53 53 UDP
23:16:53 DROP 81.250.161.140 3643 -> 203.15.140.27 17300 TCP SYN
23:16:54 ACCEPT 203.153.227.210 29097 -> 203.15.140.27 443 TCP SYN
23:16:55 DROP 192.168.2.100 1026 -> 192.168.2.1 53 UDP
23:16:56 DROP 192.168.2.201 1042 -> 128.9.0.107 53 UDP
23:16:59 ACCEPT 203.153.227.210 29098 -> 203.15.140.27 443 TCP SYN
23:17:00 DROP 192.168.2.201 1042 -> 192.112.36.4 53 UDP
23:17:00 DROP 192.168.2.201 1042 -> 192.33.4.12 53 UDP
23:17:00 DROP 203.153.227.210 -> 203.15.140.27 ESP
23:17:02 DROP 192.168.2.100 1217 -> 192.168.2.1 8080 TCP SYN
23:17:05 DROP 192.168.2.100 1217 -> 192.168.2.1 8080 TCP SYN
23:17:05 ACCEPT 203.153.227.210 29099 -> 203.15.140.27 443 TCP SYN
23:17:08 DROP 192.168.2.201 138 -> 192.168.2.255 138 UDP
23:17:10 ACCEPT 203.153.227.210 29100 -> 203.15.140.27 443 TCP SYN
23:17:11 DROP 192.168.2.100 1217 -> 192.168.2.1 8080 TCP SYN
23:17:15 ACCEPT 203.153.227.210 29101 -> 203.15.140.27 443 TCP SYN
23:17:20 ACCEPT 203.153.227.210 29102 -> 203.15.140.27 443 TCP SYN
