Have same problem myself (don't we all!!)

Like 'mattx' code fix very neat

But have configured our wireless network for Internet access only on different ip range and backbone with access to proxy, to our main domain & backbone.

Set access points to act as DHCP svrs, allow laptops to discover proxy settings, all school data accessed via web portal so no direct access to main domains in school.

So no changes for home or school use