Project Help: Using Two Extra Netgate Modems for Firewalling a Network

Anyone using pfSense CE or Modem as their primary firewall? Need help with firewall rules for the following diagram. I have these extra modems laying around and would like to incorporate them into my network.

as of now all LAN’s have the standard allow all rule and can access the internet. FIRST) I want to allow all networks to access the NFS on the KBBN7 network hosted on the openSUSE KVM Server. Do I just open the standard NFS ports on this WAN?

I found everything I needed to know and better here pfSense baseline guide with VPN, Guest and VLAN support.