search for: fw2eth3

...ATED), which is responsible for packets from/to the local zone ("-i lo" and "-o lo"), consisting of a single interface - the loopback, not the zones which are responsible for handling packets from/to eth3 or eth4. In other words, I expected to see these packets appear in one of fw2eth3 (state = RELATED), fw2eth4 (state = RELATED), eth02eth3 (state = RELATED) or eth02eth4 (state = RELATED) zones, not on my fw2local zone. The actual logs (see below) confirm that the out interface is indeed the loopback (lo), even though none of the addresses involved are on the loopback interface...