> if it is blocked it must be only inbound

Yep, at least in France it's like this for ISPs doing this IIRC.