Sandbox a VM on subnet from intranet

view story

http://serverfault.com – I have a hyper-v server with two virtual network adapters, internal and external network types, with a VM connected to the internal adapter. The internal adapter has IP, external The hyper-v server runs RRAS for NAT and DHCP supplying client with The VM has IP The NAT works fine. Traffic is routed for internet and intranet. I want to sandbox off the VM from the subnet but allow access to the internet using gateway I read that RRAS and WS Firewall don't work together so I tried the Local Computer Securit (HowTos)