I’m a pfBlockerNG guy myself. I believe it does just about the same thing where it prevents DNS lookups of blacklisted domains. It also does ip blocking of known bad ips, it can do this because it runs directly on my firewall. Although pfsense is freebsd and not linux.