Add these rules to your iptables
1. iptables -N NOFBHTTPS
2. iptables -A NOFBHTTPS -d www.facebook.com -p tcp -m tcp –dport 443 -j DROP
3. iptables -A NOFBHTTPS -d facebook.com -p tcp -m tcp –dport 443 -j DROP
4. iptables -A NOFBHTTPS -j RETURN iptables -I FORWARD -j NOFBHTTPS
5. iptables -I OUTPUT -j NOFBHTTPS
and
iptables -I FORWARD -m string –algo bm –string “facebook.com” -j DROP
exception example:
iptables -I FORWARD ! -s 192.168.0.0/24 -m string –algo bm –string “facebook.com” -j DROP
And why exactly would you want to do that? Without some context, this seems like the worst use of a firewall ever.