SQUID: blocking https facebook

(1) open facebook use https , login then use CMD in windows, check the IP
netstat - n

(2) Use whoisIP make sure facebook IP.

(3) go to SQUID then insert below code in IPTABLES:

iptables -I FORWARD -m tcp -p tcp -d 31.13.0.0/16 --dport 443 -j REJECT


for allow certain IP for access, see below:

iptables -I FORWARD -m tcp -p tcp -d 31.13.0.0/16 --dport 443 -s ! 192.168.20.11 -j REJECT