VMware's network interfaces (vmnet0, vmnet1, etc.), which are how VMs

communicate with the host and elsewhere.

Technically you could configure the host firewall to block those as well, but it's not

tested and might not work.

It will not work. There is currently no such thing as a vmnet0, vmnet1, etc. network interface. The host knows nothing about the virtual switches, until we implement hostonly networking. At that point the host will be able to see one network interface per virtual switch.