You can achieve that with a routing firewall. iptables will do exactly what you want.
Create separate subnets for each network segment (lan, local, fam, outdoor, etc.)
Set up firewall zones and rules which permit specific traffic between the network segments, according to your requirements. It's possible to allow all traffic in one direction, but only a single port/IP address in the reverse direction.
Really? At first sight, I do not see anything that cannot be done using a router, and it is simpler (in my experience) to configure and maintain than a bridge. I have a similar configuration, where each network is configured in a different IP range, and everything is done using the standard tools.