subscribe to our Youtube
I've attached the relevant images below.
Block All Incoming Rule Config(1)
Block All Incoming Rule Config(2)
The rule should work. I would advise you to check what traffic does tcpdump package register for your MQTT port to find where does this traffic originate from.