Configure your router to assign the same IP address to your 3DS every time, then deny access outside of the WLAN to that IP address. Of course, if you actually bring your 3DS outside of your house, you have to be sure to turn Wi-Fi off before you leave, so that it can't connect to a public...