Firewall Basics - Guided Q3

Hey all. I’m trying to answer Q3 on the Guided Exercise. I feel like I’m exhausted all possible solutions, but none of them are working for me. Any suggestions?

You want to accept TCP traffic from 10.0.0.2 to the destination port for SSH. Then you want to deny traffic from from the 10.0.0.0/24 network.

One of the answers you have chosen (in your screen shot) allows TCP traffic from 10.0.0.2 to the TCP port for FTP.