REMEMBER The first rule as the highest priority, so if you need to allow Yahoo and Google as in the example create first a rule WITHOUT ANY URL OR KEYWORD for the authorized MACs, IPs, or IP ranges, then another rule containing the MAC addresses, IPs, or IP ranges to block AND the URLs and Keywords.