@Gargron @samhenrigold Are those rules in the second screenshot pulled from the local server or the remote one, if the user being reported is remote?