Maybe it is related to connection-tracking?
Please, share your configuration Forum Rules / Guide Lines