add dst to address list swapped with add src to address list?

WHY?
Layer7 was the way to block facebook and that is now gone considering the ways that traffic is directed by such Apps.
Unless the router has DPI that can reach into encrypted packets you are wasting your time.