I also run a local DNS blacklist that benefits everyone on my network, but I rarely update it since I started using the RequestPolicy Firefox extension. It supports the point of view of "Don't fetch resources from third party domains unless I need them." If a page is broken, I can temporarily or permanently add the missing resource for that domain or globally with a simple click. Denial by default is a much better strategy as it provides some real protection against serious threats like XSS, in addition to thwarting tracking and ads.