How to separate network from network in vlan?

Question

Computer networks

Good day!!!
Tell me where to dig. There is Mikrotik 2011, there is a port not included in the bridge, vlan hangs on it. Vlan hangs on a separate bridge, on it dhcp with a different subnet. The computer in vlan receives the address and access to the Internet.
I want to isolate vlan from other computers. So that when adding a vlan to another port, devices on the port saw it.

Answer 1

Suppose a separate vlan is in the subnet 192.168.0.0/24, and the rest and everything else in the network, let's say, in 192.168.33.0/24.
Then, on Mikrotik, go IP -> Routes -> Rules or add rules through the terminal:

/ip route rule
add src-address=192.168.0.0/24 dst-address=192.168.33.0/24 action=unreachable 
add src-address=192.168.33.0/24 dst-address=192.168.0.0/24 action=unreachable