|Best way is have content filtering on the router and just make the one entry|
You can roll out a hosts file with facebook set to 127.0.0.1 via group policy.
Otherwise you need a content filter on a dual homed server.
Answers are only as good as the information you provide.
How to properly post a question: