On the Wan IP address use a star ( * ) for each box
Have you tried adding an entry in advanced/port forwarding then look at the firewall rules and you can see how its setup
These settings open ports 24000/24001 for me (auto created in Advanced/Port Forwarding)

These settings block ip 100-150 from connecting to 500-65535
I also added the words announce, tracker, vuze to parental controls and this stops all torrent
activity to anyone in the 100-150 range (my selfish nonpaying flatmates)
I set myself up with a static ip of 192.168.0.200 so I'm not restricted by the rules
