You can have a look at the DNS Firewall. For me it provided the best tradeoff between easy configuration and a acceptable level of security. A good tutorial can be found here