$ 0 0 I guess that's how dpi works.It has to allow some packets, to see what's inside them.What's your config?