firewall problem

hi there..
i have a problem with firewall, i want to blok all port in 1 ip addres but allow some port, for example ip 192.168.0.11 except port 80,443,1900,5050 and 5100 all dropped. any one maybe ha a suggestion?

add dst-address=x.x.x.x dst-port=whatever policy=accept
add dst-address=x.x.x.x dst-port=whatever policy=accept
add dst-address=x.x.x.x dst-port=whatever policy=accept
add dst-address=x.x.x.x policy=deny

?

And yes, my commands are more than likely wrong, it is given for the purpose of demostration :slight_smile: