Problem with Facebook is that they track also people who don't have FB account. I think it is important to block domains of Facebook to prevent that. I have this in Unbound config file:
Code:
local-zone: "facebook.com." refuse
local-zone: "facebook.net." refuse
local-zone: "fbcdn.com." refuse
local-zone: "fbcdn.net." refuse
local-zone: "fbsbx.com." refuse
local-zone: "tfbnw.net." refuse
local-zone: "fb.me." refuse
local-zone: "fb.com." refuse
local-zone: "fbcdn-profile-a.akamaihd.net." refuse
local-zone: "facebook-web-clients.appspot.com." refuse
local-zone: "fbsbx.com.online-metrix.net." refuse
local-zone: "facebook.com.edgekey.net." refuse
local-zone: "facebook.net.edgekey.net." refuse
local-zone: "facebook.com.edgesuite.net." refuse
local-zone: "instagram.com." refuse
local-zone: "cdninstagram.com." refuse
local-zone: "whatsapp.com." refuse