Unsuccessful matching against "address" data group

I'm trying to block IPs that show up in the X-Forwarded-For header, and I'm quickly finding out that the "Address" data group is very picky as to what you try to compare against it. The rule I tri...