I've tried both commands, DROP and REJECT, and both worked as expected: the web server becomes inaccessible.

Your browser probably cached the webpage, try pressing F5 or use incognito mode.