pfsense routing question

[koolaidkitten]

I'm setting up a temporary guest network for some auditors. The last time a rogue laptop came thru the network it caused some havoc on the network.

I wasn't sure if pfsense could do this but pretty much i just want it to sit between them and the rest of my LAN. I would like for it if it can be able to talk to my sonicwall, but nothing else on the LAN. I tried setting a firewall rule for WAN addy block WAN net, and another rule that does WAN addy Allow Sonicwall_IP. However it seems it can still communicate with other stuff on my LAN
Here is a screenshot of my current config.
===EDIT===
Hrmm nevermind I think it is working. It can ping anything on the LAN but nothing on the LAN can ping back to it which I guess is good enough for me.