On Mon, 7 Mar 2005 19:59:22 +1000, Quark IT - Hilton Travis
<hilton at quarkit dot com dot au> wrote:
> Hi All,
> 
> I just tried blocking outbound access from a single internal machine
> using:
> 
> Action:  Block
> Interface:       LAN
> Protocol:        all
> Source:  Type:  Single host or alias
> Source:  Address:       192.168.11.12
> Destination: any
> Log:             yes
> Name:            Block test PC
> 
> And the test PC can continue to access the Internet without any issues
> whatsoever.
> 
> Any ideas?
> 

You put it above the allow rule?  

-Chris