[NTLUG:Discuss] (no subject)

[Ralph Green]

Howdy,
  The first can be done with aptables rules, or maybe DNS entries.
This stops casual users, but not anyone determined.  You can get
around it with VPNs or proxy sites, or knowing the IP addresses.
There are products such as Dan's Guardian that make some of this
easier to maintain, but they still stop mostly casual attempts.  I
think the last part of your request is not practical without a lot of
work.  You could setup a transparent proxy on your network egress, but
you'd have to keep up with the urls you want to exclude and tht would
be a lot of work.  You might have better luck, if there were a small
set of youtube videos you wanted to allow and you could exclude the
rest.  Then, your proxy would not be too hard to maintain.
  This is the way I see it, at least.  I have setup firewalls.  I am
working on one now.  But, I have not really tried to make things
inaccessible, except for kids.  That is why I mentioned Dan's
Guardian.
Good luck,
Ralph