There's also an HTTP admin tool for the brave hearted.

This Parental Internet Packet Filtering is a blacklist based network traffic filter to block access to certain domain names for all or some outbound and/or forwarded HTTP and SSL traffic.

The blocking principle is simply to detect and discard any IP packet that constitutes the initial handshake of an HTTP or SSL connection to a blocked domain. By discarding these initial packets, the blocked domains become inaccessible.

The project includes two alterantive daemons: "rrq_nfq" for iptables based filtering, and "rrq_vde" for use on a VDE cable chain. Includes "make deb" for building a Devuan (.deb) package.