Does this make any sense? I add a firewall rule to drop an IP. I can no longer ping it. But I still see it in the logs of my server whose port is NATed.
And for the love of god, Fulvio, fix your incessant reCAPTCHA! I had to go through dozens of chimneys, traffic lights, palm trees, hills, and bicycles!