Limit what domains it can lookup, force it through proxy that is whitelisted to only the domains you want it to access, and block all outbound traffic for it to the internet. It won’t be perfect.

I did something similar. Took a few hours to review squid/bind logs to find what was needed.