I know very basic networking only.

Lets assume:
1) using tomato firmware with Asus router.
2) WAN port connect to internet
3) router has no DHCP running
4) 1 LAN port connect to machine ip 10.0.0.1, there are other 10.0.0.x machines
5) 1 LAN port connect to machine ip 192.168.0.1, there are other 192.168.0.x machines

How do i configure in the router to allow
1) only 192.168.0.1 machine to access 10.0.0.1 machine, but all other 192.168.0.x machine cant?
2) all 192.168.0.x machines can access 10.0.0.1 machine only but cant access other 10.0.0.x machines
3) all 192.168.0.x machines can access all 10.0.0.x machines ?

This is a sample image i get from the internet, i dont know how to read them


Thanks.