You have the ports mixed up. Use this one, I tested it. It works at 
blocking people from hitting a website at port 80 (it won't block secure 
sites though, you'll have to include that port in another rule to do that)

Screenshot below.




Henning Andreseck wrote:
> Ok, now i did it like you said.
>
> but it doesn't work. I still can connect to the wan directly
>
>