is it possibly a default rule blocking SNMP out to the internet
or maybe it's double NAT
will the block rules still work?