filter java 80 0 0 0 0
filter java 80 except 0.0.0.0 0.0.0.0
64.58.76.225 255.255.255.255
In this example, all port 80 java is blocked except to a specific yahoo.com host address. Add additional except statements for further hosts. Change the mask to allow java from trusted networks.