Firewall rule being bypassed

Can someone please help explain why my firewall rule is being bypassed?

The UTM box has an ip of 192.168.0.100 on its internal adaptor which is connected to the internal network switch. The external adaptor has an ip of 192.168.1.2 and is connected to the router provided by my ISP which has an ip of 192.168.1.1.

I’ve turned off web filtering etc and just left the firewall on to rule out anything that might be complicating matters.

I’ve got 3 rules in the firewall.

1) Specific host - reject any port access to any external address
2) Allow Internal network DNS to any ip
3) Allow Internal network web surfing to any ip

For whatever reason the specific host which is supposed to have access to all external addresses seems to ignore rule 1 and accesses websites using rule 3.

Any ideas anyone?

Thanks