your easiest way is to build up an proxy server.
a cheap workstation will do.
a linux will do much better than windows but if you don't have the knowledge, you may use windows too.
make the proxy control the allow/deny by user/group of your wish and make the firewall allow access only from the proxy server.
_________________________
!

download KiXnet