EX4200 Firewall Filter on A VLAN

I have an EX4200 running as a switch/router. I have a few Servers on a VLAN. I am looking to create a Firewall Filter and apply this filter to the VLAN with the Servers. The goal of allowing RDP (TCP3389) from a subnet (i.e. 192.168.1.0/24), then Deny RDP(TCP3389) from all other subnets, but allowing all other traffic to and from these Servers from everything. Can someone help me out with the format i should be using here? I have tried a few things without success.

Thank!