[Need help]Firewall

Hi everybody, I'm using astaro 220(v8). Please help me create firewall rule :
- 10.0.0.*** (255.0.0.0): can use all service(port)
- 10.0.1.*** (255.0.0.0): can use email only.
I have try create 2 rule :
1. 10.0.0.0/24 - any - any : allow
2. 10.0.1.0/24 - Email Messaging - any

But user in IP range 10.0.1.*** can use internet ...
Please help me, thx