s7506e防火墙插卡做出口NAT不通 V5

抓包提示如下：

*May 2 20:12:22:486 2000 H3C-Firewall-WaiWang FILTER/7/debug: Thread 6, the tcp packet is denied from Untrust to Trust: (223.104.97.45 46393)->(172.16.0.20 8000), 48 bytes, ACL none. *May 2 20:12:22:487 2000 H3C-Firewall-WaiWang FILTER/7/debug: Thread 9, the tcp packet is denied from Untrust to Trust: (223.104.97.45 46394)->(172.16.0.20 8000), 48 bytes, ACL none.  

借款不支持调用ACL

[H3C-Firewall-WaiWang-GigabitEthernet0/1]firewall packet-filter ? 

 ipv6 ACL IPv6 

[H3C-Firewall-WaiWang-GigabitEthernet0/1]firewall packet-filter  

zone name Management id 0 priority 100 zone name Local id 1 priority 100 zone name Trust id 2 priority 85 import interface Vlan-interface1001 import interface Ten-GigabitEthernet0/0 vlan 1 to 4094 zone name DMZ id 3 priority 50 zone name Untrust id 4 priority 5 import interface GigabitEthernet0/1 switchto vd Root object service port service tcp destination-port 8000 zone name Management id 0 ip virtual-reassembly zone name Local id 1 ip virtual-reassembly zone name Trust id 2 ip virtual-reassembly zone name DMZ id 3 ip virtual-reassembly zone name Untrust id 4 ip virtual-reassembly interzone source Trust destination Untrust rule 0 permit source-ip any_address destination-ip any_address service any_service rule enable rule accelerate interzone source Untrust destination Trust rule 1 permit source-ip any_address destination-ip any_address service l2tp service any_service rule enable rule 0 permit source-ip any_address destination-ip any_address service any_service rule enable rule accelerate interzone source Any destination Any