Dennis Olvany wrote: > May 4 19:06:02 b1 kernel: ipfw: 10600 Deny UDP 195.16.84.250 > 192.168.102.10 in via ste0 (frag 33624:67 at 1480) I see. The frags don't contain ports and therefore do not match the dynamic rule. A static rule took care of it.