How can a local network deny access to the Internet?

Question

Mikrotik

Hello.
There are two local networks (bridge1 and bridge2). How can a second network deny access to the Internet? Both networks must be accessible from each other.

Answer 1

throw out forwarding for bridge2 from NAT

Answer 2

for the second network, register only the route to the first.