Short note for you (may be useful later): CBQ is a special service, in fact. Your /etc/sysconfig/cbq/cbq-98.service is a script setting up CBQ using 'tc' command. There's no 'cbq' one. Also, instead of CBQ you can use different other ones like HTB (they differ in the ways they deal with packets that come to one group - or class as it's called). Settings for such services are made of rules (like for iptables).
I see that you're using a script that's similar to
http://www.cs.ut.ee/~mroos/cbq.init (the same variables in config file). Now, there's a default rule. All packets that don't go into other defined ones match the default ones. The program also doesn't like settings with '0'. It was designed to limit traffic, but to a positive value, not block it. The best solution IMO is to block using iptables. You have masquerade set, so now you need to add blocking rule. Something like
iptables -A INPUT -s 192.168.0.51 -j ACCEPT
iptables -A INPUT -s 192.168.0.52 -j ACCEPT
with default policy DROP on INPUT should handle this.