How to block websites with your internal dns server
Just create a new Master Zone with the domain you want to block.
If you are running BIND9 and Webmin as I do, that’s even easier: click on “create master zone”, in the “domain name / network” field write the domain, e.g. “facebook.com”, don’t forget to specify an email, then click “create” and “apply changes”

December 16th, 2008 at 4:50 pm
A better way is to use an iptables rule like
iptables -A OUTPUT -d 69.63.178.11 -j DROP
(but you need to know every alias for facebook).
This is better because if you know IP address of a site you can bypass DNS.
Best regards friends