Some traffic will pass, other will not

[dempseywj]

Gang, new to I have a 1:1 nat that allows access to a www server.

My rule looks states "any source allowed to access 10.1.30.11 port 80"

Some traffic is allowed to pass, some traffic is not:

From my logs (gui)
[Pass] Jun 8 11:15:45 WAN 151.205.5.4:59784 10.1.30.11:80 TCP
[Block] Jun 8 11:15:25 WAN 24.206.216.28:39442 10.1.30.11:80 TCP

When the traffic is blocked, it says "block drop in quick log labeled all "Default block all just to be sure"

Please help! I need all traffic to pass to www for this machine.

[cmb]

All legit traffic gets passed. Out of state traffic is common and gets dropped. Same as this:
http://doc.m0n0.ch/handbook/faq-legit-traffic-dropped.html

This also drops traffic some hacking tools generate with invalid flags, you'll see a little of that, mostly the above.