For something like this you must start blocking at the network level, simply allowing the traffic would make these trivial to bypass via even something as simple as a web browser.