DNS hijacking
When the DNS server has no entry for a domain, it will return an NXDOMAIN respone. The government could therefore require ISPs to return NXDOMAIN responses for the domains that are forbidden.