I think the first place to start is with squid proxy and blocking certain mime types.
I managed it years ago with a different firewall distribution and a much older version of squid.
I think you might also need squidgard.
First post
Last post
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.