Comment by dogcow

That's not really sufficient. It could still phone home if it falls back to IP addresses. You should be blocking it at the firewall level, not just with DNS.

But me personally, I wouldn't ever connect any of these devices to my network.