Small office network internet access control

All -
First - thank you in advance for any insight you can provide.

A friend of mine has a small business with broadband (cable) access. He is having trouble with certain users accessing websites that are not work-related and would like to be able to keep certain PCs from visiting *ANY* site but 3 specific ones (eg the hosted company site, eBay, and cnn).

The business currently uses a BEFSR81 8-port broadband router/switch that does *not* support "white lists" or content-filtering by IP or MAC.

My question is: I've found a router that has the filtering ability he'd need (the DILB604 D-Link) but it's only a 4-port. Can this be daisy-chained? If that won't work, could that router feed (say) an 8-port switch? Are there software solutions that might work (that aren't too easily hackable)? I realize a final option would be to take an older PC and turn it into a router with a few nics and a switch, but I'd prefer that be the last resort.


Pertinent information:
- The business does *not* have a server - only the router to share the internet connection
- There are 7 current users
- 1 user (the owner) needs to have full internet access, the rest need to be restricted

Again - any assistance you all can provide is greatly appreciated

 

Hi,
Looks very close to what you want:
http://mywebpages.comcast.net/hqh/html/tworouters.htm

also
http://www.annoyances.org/exec/forum/winxp/t1105011432
http://www.tomshardware.com/forum/23570-42-problem-daisy-chained-wireless-router

Matt
Edit: mybikegoes200, Australian Moto GP this weekend, wish I was there! Congratulations to our local hero.