Bug in url-groups to block access to ? Or I'm not setting it up correctly?

I thought I had just figured out how to disable access to our Buddypress members for visitors to our site.

I set up a url-group to block acess to this URL:


When I then add that url-group to my visitor access level, it redirects people even at the main page.

Same thing with other access levels, if that rule is activated they get redirected at the main page.

Do I have a mistake in my url string, or is there a known bug here?

Do the negative rules need to be in a specific order?

I’m trying to prevent unwanted direct access to our members so people can’t get around our subscription.