Question about rules between VLANs

[pacmac]

Hello,

I have VLAN3 and VLAN40.

if I block traffic from VLAN3 to VLAN40 this way, I cannot ping VLAN40 hosts from VLAN3.

This way (disabling the previous image blocking rule) I can ping VLAN40 hosts from VLAN3. but, if I do not enable the last rule, that allows traffic from VLAN40 net, how can VLAN40 pong be received in VLAN3?

With the first image blocking rule disabled. Even if I activate the VL40 blocking rules, pong is received by VLAN3. It only blocks if I start a ping from VLAN40 to VLAN3

is this a expected behavior?

BR.