Blocking internet access for the host machine but allowing VMs

Provide a USB Wireless card, Use USB Passthrough to the VM. Set up the VM to use the USB Wireless Card.

Make sure the VM is not in Bridged mode.

Now you can restrict Host Internet Access and allow VM Internet Access via the USB Wireless card and Passthrough.