deny a program access to the Internet