Why does this traffic not get dropped

Hi Erik,

you need to black hole these networks. A simple start is to change you source network to wan.

then look through the documentation and search the forums for examples of how to send unwanted connection attempts to a dead end address.

ian

Okay, thanks, the issue has been resolved although i don't understand why a simple block doesn't work and you have to configure a black-hole.