Now all packets from Nisse will be dropped, all other packets are still allowed just like before.

This is because the default policy of the INPUT chain is still set to ACCEPT (default)