You need to ensure that the new policy applies only to connection requests from the 192.168.0.0/24 subnet