If that’s a dns server, that will help with a lot, but not against everything. Some malware has hardcoded IPs to phone home, so they don’t need to look up any ips.