Hello Julius,
we will test this parameter gw/sim_mode and check if we get more information about "reject"-entries. Because parameter isn't already set we net a restart of SAP. After that I hope parameter is dynamically switable as announced in parameter documentation. RZ10 does not know this parameter although RZ11 shows documentation.
In notes 1480644, 1444282 I read, it is the same setting gw/acl_mode=1 like setting gw/reg_no_conn=16. So I think this should be for the beginning. But your're right - it's better to increase gw/reg_no_conn step by step.
Reginfo / secinfo should look like this?
reginfo:
P TP=*;HOST=local;ACCESS=local,x.xx.*.*
P TP=*;HOST=internal;ACCESS=local,x.xx.*.*
secinfo:
P TP=*;USER=*;HOST=local,x.xx.*.*;USER-HOST=local,x.xx.*.*
P TP=*;USER=*;HOST=internal,x.xx.*.*;USER-HOST=internal,x.xx.*.*
Regards,
Julia