How to block facebook access

[John Levine]

In article <5999955C.9030601 at gmail.com> you write:
>What do you think about this method?
>
>Add entries into /etc/hosts file.
>
>127.0.0.1    blacked www.facebook.com
>127.0.0.1    blacked n.facebook.com
>127.0.0.1    blacked facebook.com
>127.0.0.1    blacked login.facebook.com

Seemn like a fairly ineffective way to block users across a LAN most
of whom are likely running Windows.  You need to block the names they
look up, not local lookups on the gateway.

I do agree that the best way to block Facebook is via the DNS cache on
your gateway, assuming that's how your LAN is set up.  Bind and
Unbound both have ways to add local overrides.  RPZ is one possibility
but for a short static list of names, there are easier ways.

R's,
John