Firewall/NAT

I would like to apoligize if this question has been answered. I have searched and come up empty handed.

Is there a way that I can restrict access to an IP address. Here is my situation.

I have a network printer that is dedicated to checks and I want to restrict it to only the people who print checks. In addition to this I would need to setup a computer at 192.168.1.255 to access the printer and 192.168.2.255 which is connected to this office via a tunnel.

Just so I am clear, you want only a single computer to access that printer?
if that is the case then in rules on the LAN interface setup with the "not" option on the source, that will block all computers on the LAN from the printer except the one defined in the rule.

As an example if this is the IP of the PC 192.168.1.5   and this was the IP of the printer 192.168.1.10 your rule should look like this

          Proto                   Source               Port                   Destination               Port            Description   
   
(Reject)  TCP/UDP        ! 192.168.1.5         *                       192.168.1.10             *                 check printer     
(Pass)       *                  LAN net                 *                          *                             *              Default Lan -> any