RRAS - Netsh parameter issues

Hi Guys

I need to configure about 70 + servers with RRAS. These servers are
going to be NAT boxes and will only allow certain kinds of traffic to
certain IP's. I am using the following Netsh command

netsh rout ip add filter name="external" filtertype=input
srcaddr=10.0.3.16 srcmask=255.255.255.0 dstaddr=10.0.28.16
dstmask=255.255.255.0 proto=any
netsh rout ip add filter name="external" filtertype=output
srcaddr=10.0.28.16 srcmask=255.255.255.0 dstaddr=10.0.3.16
dstmask=255.255.255.0 proto=any

What I am expecting it to do is to allow all traffic from ip 10.0.3.16
to 10.0.28.16.

However what happens is that it actuallied denies this specifically and
allows everything else but this. If I go into the RRAS Admin GUI it
says Recieve all packedts except those that meet the criteria below. I
have to then check the box that says Drop all packedts except those
that meet the criteria below.

Is there any way to fix my netsh command in the first place so that I
do not have to go into the GUI and check that box. I.e. is there any
way to have the Drop all packedts except those that meet the criteria
below box checked using the netsh command

Any help would be greatly appreciated