Restrict Outbound Connections of a Windows Server 2008 NAT Router

view story

http://serverfault.com – I am setting up a Windows Server 2008 R2 lab environment in VMWare workstation and attempting where possible to use Windows Server 2008 R2 to implement machines that serve specific roles within that environment. Using the "Network Policy and Access Services" role I have been able to setup a machine that can server as a NAT router. The issue is that any and all connections are allowed outbound. Is there a way to restrict what outbound connections are allowed? (HowTos)