I consider this also but can we block group of users via username? Via ip address and via mac addresses?

Users can be blocked by IP in the Web Filter.