Hi I would like to block one user on all of the linux machines (Debian Wheezy) from being able to surf the internet, chat and email. However they are using linux based Rip stations for large format printers so they need to be able to access everything on the local network. They do not, however need to access any thing outside of the local network.  
Block Internet access, but not network access for a user
networking;firewall