Locking Internet, like a Firewall ?

I need to lock any kind of internet connections, but the condition is that I can't lock any "intranet" connection (addresses in my subnet)

Other complication is if a user have a Proxy or something like that...

I thing it's similar to a firewall.

Thanks.

Check out ZoneAlarm at "http://www.zonelabs.com/".