Regarding web-based filtering, you might want to consider running Privoxy, either on individual machines (which is how it's set up to run out of the box, only listening on localhost) or for your network: http://www.privoxy.org/ - Nate