Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.
Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).
Is there a way to block most types of downloads on a network segment?
I think the first place to start is with squid proxy and blocking certain mime types. I managed it years ago with a different firewall distribution and a much older version of squid. I think you might also need squidgard.