Internal Access Blocking

I have a Mikrotik RB2011.

I have 2 servers in my house one Windows server 192.168.10.2 and one linux server 192.168.10.100.

What I basically want to do is block any access from .100 going to .2 but I want .2 to be able to access .100.

How would I go about doing this?