Hello,
When creating a blocking to a specific DNS domain/Deny Immediately (e.g. “xxx.com”), it’s blocked as expected, but when creating an exception to “.com” domain (Ignore Imeddiately), the block doesn’t apply. If there’s a block on the rule, I believe it should be processed first instead.