Ping doesn't drop when block rule is created

[shax11]

When I have a block rule active and I remove it, running ping changes right away from timeout to receiving packages. Now, if I have an allow rule active and I block it, running ping doesn't stop receiving packages.
Is this a bug or an expected behavior?
Thanks

[franco]

Expected for stateful rules, which is the default: sticky rule match at the time of connection creation (pass).


Cheers,
Franco