Other than Netnanny (If it still exists and does not have a backdoor yet) try running all web service through a Raspberry PI using Squid: https://www.websense.com/content/support/library/deployctr/v...