Or, if you need full access (including web) to the local subnet, but wish to restrict your internet access, just remove your default gateway. I do this regular

Or, if you need full access (including web) to the local subnet, but wish to restrict your internet access, just remove your default gateway. I do this regularly with good results.