block internet for host not working

[robertkwild]

hi all,

made a floating rule, so i can block in/out, here it is

https://i.postimg.cc/t4jhdhyB/block-internet.png

i know its disabled atm but it was enabled and it is working ie it blocks ping to 8.8.8.8 and any internet bookmarks i have it just cant gewt to them, times out

i have done invert dest as i still want to access internal websites like opnsense and hosted websites, all works

but when i send myself a teams/outlook on my phone, it comes through to my "rkw_pc" ie the "source" why is this please

thanks,
rob

[robertkwild]

Bump

[BrandyWine]

Where in the full fw ruleset does the float show up?

How does Float rules get applied? IN or OUT on an iface?
What iface is your rule attached to? What iface is your pc closest to?
What about NAT, could the NAT occur before the Float and it misses a match?

Can you do packet captures using tcpdump, lets see what it looks like.