Custom Internet Access Control on OPNsense: Blocking Social Media Sites and Allo

[Millz]

Hello, I'm facing a challenge in configuring the OPNsense firewall. I need assistance in blocking access to Facebook, TikTok, and YouTube across the entire organization. However, I'd like to allow specific individuals access to these sites by creating MAC address exceptions. Can anyone provide guidance on achieving this? Thanks in advance!

[cookiemonster]

My suggestion is to install the AdGuardHome plugin from the mimugmail repo, runs on OPN directly.
Block services and exceptions per client on it. Clients can be identified by their IP address, CIDR, MAC address, so you might need to combine with OPN to find a way to always be able to identify the users. Trickier these days with OSes being able to use different MACs.