The way I have done it at some of my client is I have used OpenDNS
to block various unwanted websites. For those who don't have a proxy server or otherwise firewall, OpenDNS is great. And best, it's Free.
Otherwise you could look at implementing a Untangle router
into the network to filter and block internet traffic.