Well you could do it like this... You first define a group policy with the rules you need. Something like this:
Then, in the Addressing & VLANs section in the MX, in the VLAN you want to restrict, you select the group policy you just created in the dropdown: