You can't, and you really don't understand the requirement, nor how to phrase the question. I suspect the title 'sys-admin' is one that was dumped on you rather than earned the hard way :-)
If you want to restrict internet use, then by far the best (and fastest) way is to set up a proxy. It can be transparent, or you can set it up individually for each machine on your local network.
Watch the logs closely and build your access / deny configuration based on whatever it is your company does or does not allow.
All in all, a couple of hours work if your server is already set up and running.
iptables is also your friend, learn this, use it regularly.
You don't strictly need two NIC's to do this, but it makes life easier if you want to run your proxy without upsetting your worker drones.
For my proxies, I'm blocking around about 1.5 million domains, this wont leave you anything left over from 2 gigabytes of RAM.
Stick 4 gigs in and you'll be fine. RAM is cheap.