I think you are using L7 Filter. This type of filter needs to see the connections just when they start. Adding the a class to an interface, Zeroshell automatically drops all connections for a short time. Therefore in this case L7 filter starts to work immediately.
Regards
Fulvio
