Looks like, from what I can remember from the older firewall rules in Unifi (been using Zone Based Rules for a while), the rule above allows your IoT network to send traffic to your Pihole, but do you have a rule to allow the Pihole traffic to return to the IoT network (or a rule blocking said traffic)?
A rule to allow would be like an "allow established/related" entry.