When I have a block rule active and I remove it, running ping changes right away from timeout to receiving packages. Now, if I have an allow rule active and I block it, running ping doesn't stop receiving packages.
Is this a bug or an expected behavior?
Thanks
Expected for stateful rules, which is the default: sticky rule match at the time of connection creation (pass).
Cheers,
Franco