Having the same problem... droping packet only from the LAN to the WAN interface... but it reply just fine from the wan interface to the internet...
my internet circuit is 50 and we are barely using 20 ...
I have another site with even small ssg's without seeing this issue...
did you guys found a solution?