[northlandboy]

Three options here, ranked best to worst, in my opinion:

* Don't allow any systems direct access to anything on the Internet. Use a proxy server, force all systems to go via that proxy server. Either use URL filtering software, or configure DNS for your proxy server to send requests to google, yahoo to 127.0.0.1. This is far and away the most secure option, and gives you reasonably good control over the types of sites that staff can access, and perhaps more importantly, gives you reporting.

* Control DNS for all clients, and put blackholes in for those domains on your own, locally controlled, DNS servers. Don't let clients do DNS lookups to anyone else.

* Use domain objects. I would strongly advise against this though, as many people have reported problems with these.

Think carefully about what you are trying to achieve. What's the point in blocking access to a couple of search engines? Why on earth would you want staff to have Internet access, but not access to the most widely used search engine? What's the point? Where's the risk/benefit analysis? So you block access to google.com - big deal, I'll just use ask.com, or alltheweb.com, or altavista.com, or....

Or maybe I'll just use one of the anonymous proxies that are out there.

Think carefully about what you are trying to achieve, and do a proper risk/benefit analysis of the situation, and do a cost/benefit analysis of your proposed solution. Don't just put in a knee-jerk "block all access to google quick!" solution.