Which firewall rule is blocking my traffic!?

Below are the list of commands that you need to find out which rules on the firewall is "deny"-ing your traffic.

Input interested parameters
diag debug flow filter addr 10.130.1.223
diag debug flow show console enable
diagnose debug flow trace start 100
diagnose debug enable

You can also put a range of IP to diag debug flow filter addr 10.130.1.0 10.130.1.250

"diagnose debug flow filter" - this shows the current parameters on the filter if any

You need this to clear the filter and disable the debug
diag debug flow filter clear
diag debug reset
diag debug disable