as i am reading ur post, the quick tip on AO shows

"Your firewall is only secure if you monitor the log files, ignore them at your peril"

keep it in mind