Rules are not being obeyed

[senseivita]

I just reinstalled OPNsense and set only basic rules as I config other areas and the rest of the network for the change. I had set a block (reject, actually) rule for some hosts that shouldn't connect out, I did it same as always, inverting the match for the destination to the nonroutable space (RFC1918) and put it above the allow any to any rule, usually that's enough; just now I added a new address to the alias of blocked sources and realized it has been allowing the hosts to connect out all the time.

I tried reordering the rules so the Apply button would appear and do so, then reorder them back and apply again. It didn't work. I checked if I didn't inadvertently enabled some sort of bypass, like the proxy, but I didn't.

I'm on version 19.1.10, I applied the update today, I believe. Like I mentioned earlier, I just noticed this happening; I don't know if this was happening before the update. Is this a bug or did I miss something?

I have no floating rules. My LAN interface is an LACP LAGG interface and the public-facing interface is OPT1 because WAN got somehow locked up and when I select it in the sidebar it takes me to the interface assignment page but it is on the LAN default group at least.

Thanks !

[ruffy91]

The rules are disabled.
Enable them by clicking on the reject respectively block button. Normally they are red for enabled rules.