The destination address needs to be a single host, i.e. 50.78.239.106 or 50.78.239.106/32 - if you specify /29 for the destination, that means all 8 addresses in that prefix are matched by the first rule.