The traffic is dropped by the Default_Access_Rule which means that the source network is not routed on the lan interface.

Set Section Rules/Access to allow the dropped network xxx.xxx.x.x/24 so the system will accept it as a sender address.