Limit access to a single host

I have two 2 hosts (A and B), each with a single network interface, directly connected to a 3G router, via the LAN ports. I've configured both host A and B gateway to point to the 3G router. However, host A is ONLY supposed to be connected to host B. How do I limit host A access to the exterior (i.e., the Internet)?