[hanzer]

Originally Posted by Amithapr

2) Could I restrict some sites ex: facebook totally ? If so please give me information on that.

Might this be done through the DNS system rather than the firewall? For example, if unbound were configured as an authoritative, validating, recursive caching DNS for the LAN and /var/unbound/etc/unbound.conf contained a section like this:

        # Block Ad Server domains. 
        local-zone: "doubleclick.net" redirect
        local-data: "doubleclick.net A 127.0.0.1"
        local-zone: "googlesyndication.com" redirect
        local-data: "googlesyndication.com A 127.0.0.1"
        local-zone: "googleadservices.com" redirect
        local-data: "googleadservices.com A 127.0.0.1"
        local-zone: "google-analytics.com" redirect
        local-data: "google-analytics.com A 127.0.0.1"
        local-zone: "ads.youtube.com" redirect
        local-data: "ads.youtube.com A 127.0.0.1"
        local-zone: "adserver.yahoo.com" redirect
        local-data: "adserver.yahoo.com A 127.0.0.1"
        local-zone: "ask.com" redirect
        local-data: "ask.com A 127.0.0.1"

[assuming facebook.com were similarly added to this section] would this accomplish the goal?