security-zone

[alex20]

Hi!

need help!

I configured my MSR1003 router. Configured dns,ntp, icmp - all was worked

then i'm configured security-zone:

security-zone name Untrust
 import interface GigabitEthernet0/0

zone-pair security source Untrust destination Any
 packet-filter name aclUntrust

acl advanced name aclUntrust
 rule  permit icmp
 rule  permit udp destination-port eq dns
 rule  permit tcp destination-port eq dns
 rule  permit udp destination-port eq ntp

and when send ping from router? i get this:

<TM-RT0001>ping 8.8.8.8
Ping 8.8.8.8 (8.8.8.8): 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out

so from router not working services: ntp, dns  and other...

Why?

What need more?