Firewall rule before Port-Forward not working?

[Bytechanger]

Hi,

I want to block all Internettraffic wich isn´t from Lets Encrypt Server to Port 80 and 443.
But my block rule seems to be ignored...

My ruleset:

[...]
                 Source                            Destination
IPv4 TCP    ! Lets_Encrypt     *    WAN address    80 (HTTP)    *    *    

(now automatic Rule from Port Forward)
IPv4 TCP    *    *    172.30.90.81    80 (HTTP)    *    *    
IPv4 TCP    *    *    172.30.90.81    443 (HTTPS)    *    *    

Is it wrong? I think, firewall ruleset are first-match. So if Traffic to Port 80 arrives, wich is not from Lets Encrypt, it will be blocked...


Greets

Byte