banned ip still got forwarded by nginx

[siga75]

I have an IP banned by nginx (and suricata also detected and blocked an nmap fomr this ip) but packets still get forwarded to the backend, where I wisely put another protection level, but still how is this possible? Maybe I miss something on how ban works, I set the cron task every 10 minutes, IP ban was at 19:00 and at 19:30 still get IP request on my backend

[fabian]

The feature configures an internal alias, which you can use in a custom firewall rule. It is not automatically created.

[siga75]

Oh, nice, good to know

THX!