Intranet Access not Internet

I have terminal server running with users connecting through a thin client. My internet connection is connected through our main site (T1)I want users to be able to connect to our intranet but not have access to the internet.They will need access to both intranet sites on campus and at our main site.