Isolate a vlan in one direction

If with this rule
chain=forward action=drop src=10.0.10.0/24 dst=10.0.30.0/24
I isolate VL10 from VL30 how do I make it so that from VL30 I can see/ping VL10 ?

Thanks