[ubuntu] One way communication between Docker containers

Hi all!

I have a question i cant quite find a answer too (very new to Docker).
I have three Docker containers in the same network, i would like for container1 (tomcat webapp) to be able to contact container2 (mysql) - works.
But container3 (tomcat webapp) should not be able to contact container1.

So both container1 and container3 can contact container2, but container1 and container3 cannot contact eachother.
Is that possible?

Thanks on advance!
Best regards!