> So, you're looking to prevent certain systems from reaching the internet?
Yes!!!

> You can do that with normal firewall rules as well.
Too much complex... and host file is very large!
... and update all clients/computers? Is not a good idea, more time
required!

> I guess all this really means is that I still don't understand the
question.
Please digit this link:
http://webpages.charter.net/hpguru/
http://www.mvps.org/winhelp2002/hosts.htm

Bye.
Massimo Bolsi.