How do I create a default deny all rule that will always be at the end of my simple queue?

queues are for bandwidth limitations and do not have action deny. To drop packets you have to use ip firewall.