[abusharif]

memory allocation problems can often be caused by "comments" in rules or rule names that contain strange characters and letters. For this use always enligsh only without "local" letters.

you can also check stats on memory allocation with 'fw ctl pstat'

Also depending on hfa build, you should use hfa_04 if u already dont on r60. It contains some important dtpsd fixes.