as there has been confiusion about the rule number logging.
The rulenumber that get logged in the logfile are actually the webadmin rulenumbers, not the netfilter rulenumbers.
ASG V7 supports up to 59999 packetfilter rules.
The rule numbers starting with 60000 are used for automatic generated rules by the system, like the default block rule at the end of the packetfilter.
A lot of people are expecting too much from that logging, as in most cases admin's only use ACCEPT rules, which means that the only drop rule in the system is the default drop rule at the end of the packetfilter.
This rule will log all dropped packets with the numbers (60001, 60002, 60003) depending on the protocol, tcp, udp, icmp.