1. Just create a firewall rule like you did for the pihole? Unless you are also talking about broadcast discovery, in which you will need a plugin like udpbroadcastrelay2. Host(s)