Hi all,
	 
	it seems as if my ssh rule for traffic coming from WAN towards a
server in LAN dows not work. 
	 
	The configuration is very simple. And without the rule deny
which should allow this traffic and an any-any therefore it is working.
So routing etc. is fine.
	 
	This is the config: 
	TCP   10.5.40.34:22  --> 192.168.50.90:22 
	
	 
	 
	and the flow back is allowed in the LAN section: 
	* LANnet:*  --> *:*
	 
	 
	
	 
	But here is the error: 
	denied 1632:45364880   WAN   10.5.40.34:4502  -->
192.168.50.190:22 
	 
	
	 
	This sounds strange to me, because SSH only needs port 22 and no
passive ports like FTP.
	 
	Has anyone a hint?
	 
	 
	Thanks a lot for your help