How to set vyatta to block all traffic destined for a network other than ours

Hi Team,

   I am new to vyatta and I am trying to construct a set of firewall rules that basically says, block all traffic destined to a network other than ours.  In this case the local subnet is 10.10.10.0 and I want all traffic behind vyatta to go through our network (same side as eth0) but not exit from eth0 to any other destination.

 set firewall name eth0out rule 10 action drop
 set firewall name eth0out rule 10 protocol tcp
 set firewall name eth0out rule 10 destination address !10.10.10.0/24
 set interfaces eth0 firewall out name eth0out

Line #3 is what I am having difficulty with.   the ! doesn't seem to work. Can someone just guide me on the proper syntax?

Thanks and regards