How to block inbound subnet

[mstoop66]

Hello, I have OPNsense running for a small office, some Port Forwarding configured for SMTP and IMAP.  There are some internet IPs that  continually trying to connect that I want to block, when I set up a rule to block it (FLOATING or WAN) it has no affect.  The logging filtered on the offending IPs states "let out anything from firewall host itself"  -- my rule is being bypassed/ignored?

Thanks