short: YES
Long:
1. squid and squidguard need to be installed, if done with opendns it works a little better, do a block rule to prevent them from bypassing opendns, useful for sites that use https as squid does http only
2. yes with firewall rules
3. yes/no ads with squid and a custom config, spyware via http only with havp.