Home Assistant OS, FW / ACL

I have Home Assistant and IoT in different VLAN´s and struggling with relaying multicast traffic. Tried everything and gave up relaying multicast, plan B was to another interface to HA but how can I restrict access traffic inbound and outbound?

This should help