>Is it possible to create a filter to allow a user to browse >and deny the user to run a HTTP server ?
sure, allow tcp port 80 out and deny it coming in.