Hi Andy,
v4.1 is good, makes it easier to help
I started with Level 8 but that probably bares next to no resemblance now, I've edited the individual files to suit my server and needs far beyond.
Note that in a level config, if the line is highlighted (white lettering on grey background), that rule is active, if the line is clear (black text on white background), it is inactive.
Re the manuals, yes, I think I only read them once, then figured it out by trial and error. With a firewall, I think it is a big ask to write an indepth manual considering no two configs are likely to be identical but a couple of pointers would have been nice.
But now the Injoy GUI 'Dropped Packets' and 'Rejected Connections' windows are full of log messages from this client. Can I prevent logging output of this rule? 'Log-Control = Disabled' does not help.
Do you have the rule in blacklst.cnf or firerule.cnf ?
It should be in blacklst.cnf as a deny rule.
Bare basic rule in blacklst.cnf with logging unticked should work.
(Note, I'm trying to figure out image stuff so this might take some editing to get right)