The firewall rules work to isolate the remote servers, but unfortunately they can still communicate if you are using an egress gateway (probably because the server thinks the traffic is coming from inside), I will try to work something out.