set up *nix computer to only allow local WiFi network sharing and no internet access

some Debian flavors have this built into the WiFi GUI, but I'd like to learn a more generic option in the CLI or config files

sorry for the noob question, thanks for reading