[ccmay]

Some new ports and websites for me to block from the end users.

Can you block outgoing port 443? Probably not. That's what I use to run an SSH tunnel with proxy forwarding from work to my home network, where it is NATted to port 22 on my Unix box. Then I adjust Firefox so that not just http and https are proxied, but DNS lookups too. Been doing this for a couple of years with no problems at all. I can go to any web site I want in perfect encrypted secrecy.

-ccm

[zeugma]

Can you block outgoing port 443? Probably not. That's what I use to run an SSH tunnel with proxy forwarding from work to my home network, where it is NATted to port 22 on my Unix box. Then I adjust Firefox so that not just http and https are proxied, but DNS lookups too. Been doing this for a couple of years with no problems at all. I can go to any web site I want in perfect encrypted secrecy.

I've got the same setup, except the DNS. I actually need it fairly often for work though, as a troubleshooting tool. It's really nice being able to just type a short string and I can verify connectivity from the outsite world to most of our websites.