how to make a non-vnet jail local only?

[Ernie Luzar]

I have non-vnet jails working that can reach the public internet.
But now I would like to make some local only non-vnet jails that can 
only access other local only non-vnet jails. BY local meaning have no 
access to the public internet.

How do I make this happen?

Thanks for any pointers.