Proxmox FW dont blocks traffic to vm

[p27426541]

i have a problem with the pve fw:


i have the fw activated on my cluster, host and vm

so i create a fw rule on my host:
source: https://www.cloudflare.com/de-de/ips/
destination: myip/24

even in my /etc/pve/nodes is the entry
IN DROP -source +dc/cloudflare-v4 -dest +dc/packets-ipv4-network -log nolog

but when i login via ssh on my vm and make a ping to any ips from cloudflare ping works

 

[p27426541]

i get the same result when i block ICMP to a destination on host or / and datacenter level

 

[_gabriel]

Direction should "out"
Don't forget Datacenter and Host Rules are indépendant from VM Rules.