I've Ubuntu 20.04 LTS for Raspberry PI and I've created a wireless access point using the snapon wifi-ap package. That allows hosts to attach to a 192.168.8 network and works beautifully the Ubuntu servers default route on the eth0 interface to the local router 192.168.0.1 permits them internet access.
However I would like to isolate the hosts from each other but still allow them accesss to the internet. But I've no experience with creating iptables/ebtables etc. in a Bridged network.
Thus my question is how to filter a network bridges traffic to DROP packets to other hosts in the same bridge but allow other network activity.