I have a ADSL connection that is "always on". I want to restrict the boys from internet access without having to carry the modem to work with me.
Take the cable then. :o)
What devices, files, etc. do I need to give to the group to prevent the connection outbound?
You can't, I don't think. The ethernet connection doesn't work as a file, so there's nothing to restrict permissions on. If your boys know the root password, you're stuffed. If not, you have a few options, depending on how savvy they are. Your best bet is to set up a firewall, preferably, but not necessarily on another machine. That gives you maximum flexibility for controlling what goes in and out at what time. If total disconnection is the goal, set a cron job to take down the appropriate ethernet connection during your work hours. If just disconnecting from web sites would suffice, and the boys don't know too much, set up wwwoffle as a local proxy. That allows (IIRC) you to control which users can access the web service. Of course, if the boys know how to change the web browser's proxy, that won't work unless you use some iptables to force outbound web connections to go through it transparently. I can't think of anything else, but I might have missed something obvious! -- "...our desktop is falling behind stability-wise and feature wise to KDE ...when I went to Mexico in December to the facility where we launched gnome, they had all switched to KDE3." - Miguel de Icaza, March 2003