How to run firewall on PVE 6.4.13

[m3a2r1]

I'm trying to set firewall on PVE but it doesn't work.
I've turned it on on Datacenter,
then I've turned it on on node,
then I've turned it on on LXC container,
then I've set example rule for drop icmp on interface (public ip).
But it still pings.
I don't know what I've done wrong.

 

[bobmc]

https://youtu.be/DNsLLrCgK0U