Well I got it working, 2 issues
- ipv6 was the problem, but I dont need it so I disabled it.
- I assumed crowdsec-firewall-bouncer when you click save&apply that it would actually restart the crowdsec-firewall-bouncer, it doesnt. going to startup and manually restarting it from there is the trick.