$ cat /etc/pf.conf block all it's enough for this situation,when someone run out of control.He can play local games ofcourse.I think,that he has better things to work like learning to school or something similar.