Whitelisting vs Firewall Rules

[bigal.nz]

Hi,

I have setup PF so that the kids can browse freely between 1600 and 2000 using an alias, and a allow rule which sits above the block all rule.

I have also setup a WPAD file so there is a non transparent proxy. Very nice.

Now I want to achieve two things:

1. Allow 24/7 access to certain educational sites
2. Allow access to banking websites without inspection.

I see there are guides on this, but they seem to use squid, and I assume that the firewall blocking rule would be invoked before the squid rule allowing 24/7 access to a white listed website?

Cheers

AG