content: I understand that iptables are meant to operate on ip addresses with helpers such as fail2ban. This method of blocking the sub/domain names was the quickest and easiest way to block the sites on your network without having to worry about ip changes or subdomain growth across most of facebook's domains.