edit: However, your link was still indirectly quite helpful. A couple of hops away, I found https://support.mozilla.org/en-US/kb/canary-domain-use-appli... which explains a better way to handle this at the network level, than blocking 1.1.1.1.