Separate subnet for DNS (pros and cons discussion)

[maholio]

@admon

As written above, you simply can’t.

Since DoH will use HTTPs you can’t block it.

Purely theoretical you can use this or this list

BUT!

• I don’t think it will block ALL DOH.
• Blocking DOH can cause connection issues.
• It is reducing security.