Is this en-devour dead? I really want to help but I wonder I'd be much use. If there's any dumb testing or boring tasks let me know.
So i'm assuming interface assigned firewall.
are you using interface based firewall or zone based?