I have a question in regards to LAN and subsequent access to the internet. If you wanted to protect your LAN from the internet would this scenario work as a sound measure. On the LAN delete root hints in DNS, provide a conditional forwarder to the router or ISP. I am a student and I am attempting to make sense of the security and the realm of possibilities that may exist in protecting the LAN from the internet. THANKS in advance for the comments.