The host is the source of the traffic, so a host filter naming an instance limits where traffic can come from, not what instance it can go to.