$ echo 'match to facebook.com' | pfctl -nvf - match inet from any to 69.63.189.11 match inet from any to 69.63.181.12 match inet from any to 69.63.189.16it takes all records from the response, but doesn't track updates.
If we blocked Facebook at work in Sweden, all employees would leave in a couple of minutes. Seriously. ;)
/Johan