Not exactly. I already have a router that is also the access point for the "normal" network (the wan connected to the internet). The pi is used as DHCP server to this network. I want to add a network to my setup using my pi as an access point. Within this new network internet should be unreachable.

Thanks for your solution. However, as a good practice I think that it is better to keep the interrupt calls as low as possible.