Expose Linux container to host without giving internet access

Hi!

I’d like to create a network with which I can expose a port of a linux container to the host but without giving the container internet access. It seems that if I specify the network with the --internal option, Internet access is blocked, but port exposure does not seem to be possible either. How would I go about this configuration?

Thank you for your help!