Firewall Routing Configuration suggestion - Guest Network and Security Cameras

Hello all.  I am trying to setup the following and having some issues.  The different ways I have tried firewalling this off is not working, so I thought I would ask for suggestions.

I Have a EdgeRouter X - 5 port.

eth0 - WAN

eth1 - Office / administration

eth2 - Guest / private

eth3 - Security Cameras

I want the eth0-WAN port "invisible" from the outside, which I think I have done.

I want eth1 and eth2 to be able to pass traffic out of the WAN.  Still OK so far.

Here is what I am having issues with.

I want eth2 to ONLY be able to pass traffic out the WAN and not see any traffic from eth1 or eth3.

The only traffic I want eth1 to see from eth3 is from IP Address 192.168.1.11 ports 80 and 443.

I feel like this should be so simple, but I am having a lot of trouble setting it up.

I have attached my configuration to this post.