If I go to the diagnostics and manually add an entry to the empty list it is shown and immediately applied - so the "transfer" from the alias creation towards the actual list is the point where it seems to "break". The general firewall-log is completely empty and does not show any log at all?