AR1220VW functions as a firewaal on a wireless network

good day,

please assist, the network is a wireless network with and adsl router and a wireless router as an AP and Dhcp server for about 100 users.

i want to configure firewall on the AR, so that users cannot access the internet, only access specific educational sites.

configured as per below, the AR has an uplink to the Wireless router(ASUS) ,Adsl router connects to the wireless router.

after configurations as below, the user can still access the internet.

please assist, what did i nt do or did wrong?

[V200R007C00SPC600]
#
 drop illegal-mac alarm
#
vlan batch 100
#
pki realm default
 enrollment self-signed
#
ssl policy default_policy type server
 pki-realm default
#
acl number 3000
 description DENY
 rule 5 permit ip source 192.168.210.222 0
 rule 10 deny tcp source 192.168.210.222 0 destination-port eq www
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 undo local-user admin
 local-user user password irreversible-cipher %^%#o1D!")ma#>N7^!1-Xr)4e.q/,h@by!ZK3=0!$8P>_<;e.G(K"G=N*c=Il[s@%^%#
 local-user user privilege level 15
 local-user user service-type http
#
firewall zone IN
 priority 15
#
firewall zone OUT
 priority 3
#
firewall zone Local
 priority 16
#
firewall interzone IN OUT
 firewall enable
 packet-filter 3000 inbound
#
interface Vlanif100
 ip address 10.0.0.5 255.255.255.0
#
interface Ethernet0/0/0
#
interface Ethernet0/0/1
#
interface Ethernet0/0/2
#
interface Ethernet0/0/3
#
interface Ethernet0/0/4
#
interface Ethernet0/0/5
#
interface Ethernet0/0/6
#
interface Ethernet0/0/7
#
interface GigabitEthernet0/0/0
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/0/1
 description Uplinkto ASUS Router
 ip address 192.168.210.11 255.255.255.0
 traffic-filter inbound acl 3000
#
interface Cellular0/0/0
#
interface Cellular0/0/1