General discussion

Implicit rule will allow (intrazone is allow by default) so you want to create a second rule that blocks all other connections