[lazerl0rd]

That doesn't work here. DNS over HTTPS (DoH) uses port 443, which you probably don't want to forward to your local resolver.

[fguerraz]

Yes, I mean you block DoH using ipset AND you redirect attempt to use other non-DoH resolvers