How to setup this rule about firewall?

[akong77]

Hello,
I have question about firewall.
My zentyal use IP is 192.168.2.XX on my intranet.
I want block any external IP and only allow some external IP to connect to ssh or Zentyal Administration.
I hvae to setup firewall and use "Filtering rules from external networks to Zentyal" this function.
But I found any external IP always connect to my Zentyal server.
How to set it?

[christian]

If you do not describe rules you have deployed, helping further is really difficult.

[akong77]

Hello,
Decision    Source    Service    Description    Action
ACCEPT    203.74.122.103/32    HTTPS    --    
ACCEPT    203.74.122.103/32    Zentyal Administration    --    
DENY    Any    Zentyal Administration    --    
DENY    Any    HTTPS    --    
This is set on External networks to Zentyal.
But I use 220.130.148.52 this IP can connect to my zentyal server.
Could I setup right?
And Service Zentyal Administration is zentyal web manager interface?

[christian]

humm, no additional rule ?

[akong77]

Decision    Source    Service    Description    Action
ACCEPT    203.74.122.103/32    HTTPS    --   
ACCEPT    203.74.122.103/32    Zentyal Administration    --   
DENY    Any    Zentyal Administration    --   
DENY    Any    HTTPS    --
This is my add rules.
It's have no any rules at default setup.
What's wrong with this?