Defriend him on facebook, and erase the message from your wall. You have 100% control over his ability to damage you via facebook, but you have not excercized it. If he has made friends with your friends on facebook, the damage is done.
I think no adult should have facebook without realizing what a terrible, intrusive, privacy invading thing it really is, unless you manage it right.