Firewall rule not blocks ip

[poomsag]

I set all user can access internet by captive portal authen.but, when i want to block some ip group by firewall rule it does not work. what's wrong?
my firewall rules are

Proto | Source | Port | Dest | Port | Gateway | Schedule
Block    TCP    Trainee      *      *        *        *
Pass      *      Officer      *      *        *  LoadBalancer
Pass      *      Officer      *      *        *  FailOverWAN
Pass      *      Officer      *      *        *  FailOverADSL

ok. I think that because sticky bit of loadbalancer. it disable firewall rule, but when I remove loadbalanced and change rule to

Proto | Source | Port | Dest | Port | Gateway | Schedule
Pass      *      Trainee      *      *        *      ADSL
Pass      *      Officer      *      *        *      WAN

it still not work.Why?