Windows Server FTP - Block / Deny All IP's Except Allow Entries

I'm using Microsoft IIS FTP on Server 2012 R2. I need to configure the FTP IP Address and Domain Restrictions to deny all IP's except specific Allow Entries that I create.

I've tried setting up several different deny rules but none of them appear to work. I can always get in, even when my IP doesn't have an allow entry. I tried using 0.0.0.0 in both the IP Address Range and NetMask fields on a deny rule, but that didn't work. 

What kind of rule(s) do I need to deny or block all IP addresses in the Microsoft FTP Configuration?