Block subnets to specific ports

I need to do the following

Setup a lan with multiple subnets - this is done

I have eth 2 with subnet A and Eth 3 with subnet B

I don’t want subnet B to be able to access anything on Subnet A

but I do want Subnet A to access anything the want to on subnet B

I’ve tried many ways to do this, what is the proper procedure…
tik.png