Block all port 25 going out ( Resolved )

[samba]

I want to block all port 25 on the lan interface apart from our mail server I have

Pass TCP   192.168.1.19   25 (SMTP)   *   *   *       allow port 25 from mail server  
Block TCP * 25 (SMTP) * * *   block all smtp port 25  
Pass * LAN net * * * *   Default LAN -> any

I have these rules on the lan interface and I thought they were processed in order or does the default lan rule to allow all over ride every thing
Thanks

all sorted I need destination port 25 rather than source
block TCP   *   *   *   25 (SMTP)   *

[danswartz]

please tag resolved issues in the subject line so people don't keep reading your post :)