@SebastianH so i am lost, i read your OP again. can you list your question again? i don't understand when you posted the picture blocking itself after the "3." why would you do that? if you do that,...

@SebastianH 10.0.0.0/29 means the whole available IP addresses, so is this gonna be a single server or everything in it? and 10.0.0.0/29 means 0.1-0.6, is your server inside this range?

@TheOci either set up dns server yourself, sync the filters with the raw github. commonly, adguard or pi-hole. this requires a server running 24/7. or use the public DNS server which blocks the...

@J-O same url accessed under the same wifi(ssid)? seem to be impossible to me. or it might be a different reason. dns. so, the site can be analyzed in different IPs and domains. so when access the...

@sb0373 so communication is bidirectional, if you block any to vlan 100, why would the server in vlan 100 be able to ping another? icmp needs to be replied. your rule blocks the reply, that should be...

@SebastianH you seem to mess up with the subnet. that could be the reason why you have a different result than the OP.