Pages viewable by using direct URL

I looked through the documentation and follow what steps I thought, re-building permissions etc but despite my best efforts nodes that are blocked to non-authenticated users are visible if the actual path to the node is entered in the URL.

Example:

I can't see certain menus or content while not logged in. However if you enter www.mysamplesite.com/?q=node/10 you can still access the page.

Any and all help/direction appreciated.

Cheers,

droddis