blocking websites
via dns:
If the built in DNS Forwarder or DNS Resolver are in use, an override can be configured which will resolve the website to block to an invalid IP address.
via firewall rule:
This is not a feasible solution for sites that return low TTLs and spread the load across many servers.