H3C F100-C-G5防火墙策略中已放行相关流量，但还是产生了一条不符合策略的告警，

没有NAT，没有VPN相关配置，就简单的放行配置的流量．

地址组配置如下，

#

object-group ip address dd

0 network subnet 172.30.10.0 255.255.255.0

#

object-group ip address WhiteList

 0 network subnet 172.30.10.64 255.255.255.248

 10 network subnet 100.100.100.0 255.255.255.0

策略配置如下,

security-policy ip

 rule 1 name GWport

  disable

  logging enable

  counting enable

  service GWport

 rule 0 name local-to-any

  action pass

  counting enable

  source-zone local

 rule 2 name Untrust-Trust

  action pass

  logging enable

  counting enable

  source-zone Untrust

  destination-zone Trust

  source-ip dd

  destination-ip WhiteList

 rule 3 name any-Local

  action pass

  logging enable

  counting enable

  destination-zone Local

  source-ip WhiteList

 rule 4 name Trust-Untrust

  action pass

  logging enable

  counting enable

  source-zone Trust

  destination-zone Untrust

  source-ip WhiteList

  destination-ip dd

 rule 5 name any

  logging enable

  counting enable

已经放行了100.100.100.0/24的流量,为什么还会产生一条100.100.100.130访问100.100.100.255的告警.访问广播地址要单独操作吗?

那位指导下,谢谢