Firewall, allow from one IP

Hello!

I want to allow access from only one LAN address 192.168.10.2 to other LAN machines like 192.168.10.5; 192.168.10.7 etc on port 3389, and other LAN machines cant connect to these IPs (192.168.10.5; 192.168.10.7 ) on port 3389.
How to configure Firewall rules for that?

Thank you in advance!

add accept firewall rule with src-address=192.168.10.2 dst-address=192.168.10.0/24
drop the rest

I made following rules by your advice, and these rules not working:

chain=forward action=accept src-address=192.168.10.2  dst-address=192.168.10.0/24 
chain=forward action=drop dst-address=192.168.10.0/24

Can you please correct these rules.

Rules are correct, if they are not matching packets then thospe packets are not going through the router.