Denying Internet Access

[wayne . ellyson]

What is the best way to deny access to the internet for individual IP
addresses?  I assume it would be an outbound filter, but how should the
filter be configured?

Thanks,
Wayne