Thanks @Flood and Flood's wife for this solution, but it is not very convenient. For example, I want to block the domain yandex.ru, which uses dynamic IP address allocation to reduce the load on servers. Is there any way to specify a domain name rather than an IP?