For what you describe, what you need is a filtering bridge. That's a firewall design that filters on level 2 (ethernet, token ring, whatever) and you can drop between the router and your network. No one will notice it is there until they want to browse a forbidden site.
For the lazy: pfSense makes a great filtering bridge when properly set up (and it is a matter of three clicks...).
|