Not that it's any of our business, but why would you want to prevent your son visiting facebook on (presumably) his own computer? It's tipping into a behavioural issue rather than technical.
If it's because of the amount of bandwidth used, and you have a capped allowance, simply charge him for access, maybe. Or get him to set up his own account with an ISP.