Abstract: A secure network appliance for filtering Internet websites checks each request from a user's browser against a whitelist of pre-approved websites and passes it only if it is on the whitelist. Otherwise, the request is replaced with pre-arranged content and returned as a response to the user's web browser. It can also check the port the user's request came through against an approved ports whitelist, and responses sent from the Internet against an approved websites whitelist. The network appliance is encapsulated within a secure container so that only an authorized administrator having a unique key can unlock it and access its control functions. The secure container may be formed as a separate hardware component that is physically interposed between a router and a user's computer, or as secure software that run on or operates with a network server.