防火墙配置了不能上网求助

配置了防火墙，公网IP能通，内网端口配了IP，也能拿到，也能通，但是上不了网，求助~~

1. #
2. version 7.1.064, Ess 9504P07
3. #
4. sysname H3C
5. #
6. clock timezone Beijing add 08:00:00
7. clock protocol ntp context 1
8. #
9. context Admin id 1
10. #
11. ip vpn-instance management
12. route-distinguisher 1000000000:1
13. vpn-target 1000000000:1 import-extcommunity
14. vpn-target 1000000000:1 export-extcommunity
15. #
16. irf mac-address persistent timer
17. irf auto-update enable
18. undo irf link-delay
19. irf member 1 priority 1
20. #
21. nat address-group 1 name 内网
22. #
23. dhcp enable
24. #
25. password-recovery enable
26. #
27. vlan 1
28. #
29. object-group ip address 内网地址
30. 0 network subnet 10.24.11.0 255.255.255.0
31. #
32. object-group ip address 外网地址
33. 0 network host address 221.207.155.206
34. #
35. dhcp server ip-pool 内网地址
36. gateway-list 10.24.11.1
37. network 10.24.11.0 mask 255.255.255.0
38. expired unlimited
39. #
40. interface NULL0
41. #
42. interface GigabitEthernet1/0/0
43. port link-mode route
44. combo enable copper
45. ip binding vpn-instance management
46. ip address 192.168.0.1 255.255.255.0
47. #
48. interface GigabitEthernet1/0/1
49. port link-mode route
50. combo enable copper
51. #
52. interface GigabitEthernet1/0/2
53. port link-mode route
54. ip binding vpn-instance management
55. ip address 192.168.1.1 255.255.255.0
56. #
57. interface GigabitEthernet1/0/3
58. port link-mode route
59. #
60. interface GigabitEthernet1/0/4
61. port link-mode route
62. #
63. interface GigabitEthernet1/0/5
64. port link-mode route
65. #
66. interface GigabitEthernet1/0/6
67. port link-mode route
68. #
69. interface GigabitEthernet1/0/7
70. port link-mode route
71. #
72. interface GigabitEthernet1/0/8
73. port link-mode route
74. #
75. interface GigabitEthernet1/0/9
76. port link-mode route
77. #
78. interface GigabitEthernet1/0/10
79. port link-mode route
80. ip address 10.24.11.1 255.255.255.0
81. #
82. interface GigabitEthernet1/0/11
83. port link-mode route
84. ip address 221.207.155.206 255.255.255.0
85. #
86. object-policy ip Any-Any
87. rule 0 pass
88. #
89. object-policy ip Trust-Trust
90. rule 0 pass source-ip 内网地址
91. rule 1 pass source-ip 外网地址
92. rule 2 pass service dhcp-relay
93. #
94. object-policy ip Trust-Untrust
95. rule 0 pass
96. #
97. object-policy ip Untrust-Trust
98. rule 0 pass
99. #
100. security-zone name Local
101. #
102. security-zone name Trust
103. import interface GigabitEthernet1/0/10
104. #
105. security-zone name DMZ
106. #
107. security-zone name Untrust
108. import interface GigabitEthernet1/0/11
109. #
110. security-zone name Management
111. import interface GigabitEthernet1/0/0
112. import interface GigabitEthernet1/0/2
113. #
114. zone-pair security source Any destination Any
115. object-policy apply ip Any-Any
116. #
117. zone-pair security source Trust destination Trust
118. object-policy apply ip Trust-Trust
119. #
120. zone-pair security source Trust destination Untrust
121. object-policy apply ip Trust-Untrust
122. #
123. zone-pair security source Untrust destination Trust
124. object-policy apply ip Untrust-Trust
125. #
126. scheduler logfile size 16
127. #
128. line class aux
129. user-role network-operator
130. #
131. line class console
132. user-role network-admin
133. #
134. line class vty
135. user-role network-operator
136. #
137. line aux 1
138. user-role network-operator
139. #
140. line con 1
141. authentication-mode scheme
142. user-role network-admin
143. #
144. line vty 0 63
145. authentication-mode scheme
146. user-role network-admin
147. #
148. ip route-static 0.0.0.0 0 221.207.155.1
149. #
150. ssh server enable
151. #
152. domain system
153. #
154. aaa session-limit ftp 16
155. aaa session-limit telnet 16
156. aaa session-limit ssh 16
157. domain default enable system
158. #