I've discoverd that enabling the option to log dropped packets actually causes ALL PACKETS TO BE DROPPED! It totally ignores firewall rules.
I suspect that this is a bug in the 1.9.2.7-8-pre9 firmware that I'm using.