a hardware firewall or a linux box with 2 network cards . Then disable outbound connections on port 80 for browsers. But there are free proxy's out there so that's a pain. Perhaps disable all connectivity except connections to e-mail and other services. Then you have your locked down network :) It'll be more secure to.