[zeroflow]

There is a workaround by enabling NAT and forcing all traffic to piHole / pfblockerNG

https://docs.netgate.com/pfsense/en/latest/recipes/dns-redir...

[rsync]

How does this help with DoH?

If the dns request is over 443 and the DoH server is the same host as the served resource, what can be done ?

[jamiek88]

Could you MITM and inspect for dns request packets?

[rsync]

Yes - I postulated this elsewhere in this thread.

The next step in the arms race would then be to implement DoHoH.

Sigh.