With pfsense and pfblocker-ng you can just plug in facebook's BGP AS number, it can look up all the subnets in that ASN and block those.
AS32934 has 379 subnets with 144k addresses and seems to cover every Facebook property from WhatsApp to Instagram to meta.com. It's guaranteed to be consistently updated since they have to announce a subnet for it to be routable.
I've been doing this a couple years now. The only noticeable side effect for my browsing habits is a tasteful void where fluffy news sites are trying to embed instagram posts.
AS32934 has 379 subnets with 144k addresses and seems to cover every Facebook property from WhatsApp to Instagram to meta.com. It's guaranteed to be consistently updated since they have to announce a subnet for it to be routable.
I've been doing this a couple years now. The only noticeable side effect for my browsing habits is a tasteful void where fluffy news sites are trying to embed instagram posts.