How to block all 80/443 traffic except whitelist

[jriggin]

I have a call center.  I want agents to ONLY access white listed sites, admin and managers are fine with pfBlocker lists.  I have looked and Squic, Squidguard, pfBlocker and I still can't see an easy way to do this.  I need to create an "Agents" group and allow them only to whitelisted sites.  Sorry for being dense, I am sure this is well documented somewhere, but I can't seem to find it.

Can anyone tell me how to do this or point me at some docs?

Thanks!

[KOM]

Squid & squidguard can do that.  In squidguard, you create Group ACLs and then apply policies to the group.