How to cut off the Internet to the container?

Question

Docker

Something I just can’t figure out how to cut off the Internet for ONE of the containers (Linux). That is, so that the application in the container cannot download anything from the Internet or send any data. At the same time, the ability to communicate with the host and other containers must be preserved.
In Google, I found only advice to cut off ip forwarding (echo 0 > /proc/sys/net/ipv4/ip_forward), but it does not work, because it cuts off ALL containers from the Internet.

Answer 1

docker create network --internal no-internets, make it the only network for the isolated container, add this network along with the one already used for the others.