Thanks for so precious suggestions!
About the solution proposed by Andy Syrewicze , I installed Debian CLI and shorewall but I have no idea how to configure it.
About the solution proposed by Vincent Loosveld, it seems not to provide full isolation, according to the prevous answer but I can’t argue for one or the other.
