I disabled SPI and change TCP/udp endpoint filtering to "endpoint independent", and I still can't a paticular web site. The logs show "blocked incoming tcp connection request from XXX to XXX".
Without Dir628 or using Netgear, I can access that web site properly.
Does anyboy have clue?