Firewall rule being ignored

[cogumel0]

I've got my firewall configured with a allow all IPv4 traffic to non-private address spaces (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) as seen in the picture below.

Yet, despite that, a particular non-private address space IP address seems to be getting caught by the default deny rule and I can't explain why. Have a look at these logs in the second picture.

Why is it that that particular IP is not getting matched by the allow non-PAS traffic?? And why only that particular IP?! Why is it getting matched by the default deny rule?

[chemlud]

Hard to say without more info, best guess: out-of-state traffic. As usual, i.e. once a week now in these forums...

[cogumel0]

chemlud, what more info do you require?

[chemlud]

Have a look at the status flags of your blocked packages. ;-) And search the webs for out-of-state traffic...