Deny Web-mail category and allow access to mail.yahoo.com as an exception.