Blocking a specific DNS query with iptables

I needed to block specific abusive DNS queries this weekend. I documented the research I did in case it helps someone else.

Basically I used IPTables to drop packets with a specific string in the payload.