If you're going to implement any kind of technical filtering it needs to be done at the network layer, and not on the physical machine that the kids have access to. If you do it on the physical machine then they will inevitably find a way around it, even as simple as booting a livecd.
Ofcourse the key is education, this content is out there and kids will inevitably get access to it sooner or later. Whatever controls you implement on your own network or devices, the kids will either find a way to bypass them, or have access to an unfiltered network/device somewhere else. And if something is blocked, it becomes more interesting to the kids and they will actively seek out ways to get at the blocked content, whereas if it was unblocked the kids may not even have any interest in it...
A good example is alcohol, when i was in school many of the other kids in my class were forbidden from touching alcohol and that made them seek out ways to obtain alcohol... Myself and a few others were never forbidden, our parents allowed us to try alcohol if we wanted... I found alcoholic drinks tasted quite disgusting, and lost interest in them.