Also look at using opendns. If you register you can configure it to block bad sites. I don't know if it will also scan all sites and forums for bad words however or how current it's whitelist will be. You might want to try it out and give it a spin. If your friend uses a NAT router, putting OpenDNS address in the routers DNS settings will provide those dns settings for all the computers, Linux or Windows that are configured to use DHCP.
When the kids get older, they may learn to edit /etc/resolv.conf if they have their own computer. In this case your friend could have the internet traffic routed through his computer and redirect any dns traffic to opendns using an iptables rule, suc as:
Code:
sudo iptables -t nat -I PREROUTING -i LAN_IF -p udp --dport 53 -j DNAT --to 208.67.222.222
sudo iptables -t nat -I PREROUTING -i LAN_IF -p tcp --dport 53 -j DNAT --to 208.67.222.222
This may be enough protection, or your friend could use Dan's Guardian & Squid as well. I think this method may be enough however. There are some pages on the web which outline what some schools and libraries use to filter traffic in a proxy server.