I am thinking that you should be able to do this in the Bindings settings, if the local accounts are using a different IP address to access the SM server than the IP address used for SM accesss to/from the Internet. You can also, I suppose, accomplish this through a firewall rule, if you have a firewall between the local LAN and the SM server.