SRX5308 , Maximum Entries Inbound Services

Hi DaneA, thanks for your response.

a: the Order of the inbound services is exactly what I need it to be. I am blocking various addresses (the undesirables) before I do any of the port forwarding (required). We found that if you do the port forwarding first, the undesirable addresses get their junk forwarded before they can be blocked, which is, I assume, the point of having a precedence. 

b: I have rebooted the SRX5308, but not when I was having the issue. I cannot verify the "blocked" addresses are still blocked (since they source from different countries), but Wireshark doesn't show any additional traffic from my "blocked" locations, and the forwarding works properly. However, once I crossed that "65 services" line, port forwarding stopped working, and I was required to physically visit the location. Once I removed the earliest two "blocked" addresses, the port forwarding started working again. None of this process required a reboot to change state. 

c:  No other changes are made within the network. I can replicate the issue (It happened once by accident, and once by intention to verify) simply by adding aditional services in the SRX5308 past the "65".

d:  The current version of firmware on the device is 4.3.4-1.  Is there some patch that addresses this limit? The last time I updated the firmware to a netgear device, it blew out all my added services and I had to scramble to re-add them. I had not done an update, since nothing in the patch notes I read indicated a change to this issue.