While looking at our FW logs I see UDP packets from internal devices sent to a FW interface with dstport=0.
2023:06:23-14:20:19 FWName ulogd[31041]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule…