Iptables to filter traffic exchanged within the same wireless LAN
First set this in the hostpad config file:
ap_isolate=1
Also: disable_dgaf=1
Please read the config file for further details.
You may need this also:
iptables -A INPUT -p icmp -j DROP
It is even better idea to specify the name of the ethernet adapter so it doesn't affect the loopback adapter or any other adapters you may have.
iptables -A INPUT -i eth0 -p icmp -j DROP
For further reading:
https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html