The best way would be to have a hardware firewall isolating the actual pc.