by genie » Sep 18 06 11:04 pm
I ran some tests today and looks like I've got the picture of what's happening with your setup. When you run this website tests (well, at least that's what I saw) the testing tool uses the same TCP connection - which means that whatever rule was set when the connection was established governs it through its life time. To make matters worse, if you have two rules which the traffic flow can conform to, only one rule will be chosen - this is why you have the same rule applied to both upstream and downstream traffic. Unbalancing the rule should help.