Firewall/NAT

i would like to keep opti 1 segment 192.168.4.1 away from my local lan network 192.168.3.1

i have services running on the lan network and i dont want guest to be able to get to or even access them

what rule would would i have to make to accomplish this

You don't need to block this traffic, it will be blocked by default. All you need is a rule that only allows the opt1 network to get to the WAN. Remember: anything that isn't explicitly allowed is blocked.

Steve.