You will have to use a VLAN for the guest WiFi. You set up a VLAN on pfSense, but I can't help with the ddwrt, as I've never used it.
Here are my rules, which allow access only to the Internet and pinging the VLAN interface.
b281058e-8165-4a58-bb40-a1d7d6b92c58-image.png