[remuskaos]

I thought I commented on this from my phone, but it seems it didn't go through, so I'll try again.

Most apps I've tried (and browsers too) can be blocked just fine via DNS. The gli.net interface allows "Override DNS Settings of All Clients" and "DNS Rebinding Attack Protection". This way, the router itself is the only resolver actually reachable. Even if I try some manual `dig google.com @1.1.1.1`, I still get the routers result.

The only thing it can't block is DNS over Https. I think that's by design, it seems it's impossible to block that.