How can I create a rule to only allow traffic from one member to all (and the reverse all to that specific one only)?

How can I create a rule to only allow traffic from one member to all the others (and the reverse all to that specific one only)?

I found a way but it it is cumbersome. It’s this way (repeated for every host)
drop
ztsrc <the address of one of the hosts that should only “talk” to the specific one below>
and not ztdest <the address of the one that should be able to “talk” to all>
;

Is there a simpler/better way?

Hello
https://zerotier.atlassian.net/wiki/spaces/SD/pages/222330881/Client+Isolation