Ok, giving up now - gotta work.

I documented what I did in "Log" - there is a DROP rule on a specific ip
in effect now. It seemed to originate from China. We should probably
install some kind of firewall script approach.

regards, Göran