Firewall/NAT

I am running t a VMWare machine and the virtiual machine im running i wnat to have access to the LAN but not the internet and i dont want anything going out to the internet.  i have a static ip on the virtiual machine i just cant figure out the ruls in monowall.

Give them VM a static IP with no gateway ?  Saving doing rules, otherwise set a LAN rule blocking it's ip (from) out (to any)