@Cattalins I noticed also that DoH wasn't not working sometimes, but you can use DoT and it works perfect, both for Google and Cloudflare.

@Cattalins That is expected. If you disable DoH (Proxy) then the router falls back to normal DNS when replying to DNS queries coming from your clients. You can do port mirroring (Network >> Switch >>...

@Hemicrusher -- 13 HTTPS TCP Source Port = 0-65535; Destination Port = 443-443 HTTPS -- 14 MC_TCP TCP Source Port = 0-65535; Destination Port = 25565-25565 Minecraft Java -- 15 MC_UDP UDP Source Port...

@Hemicrusher correct last line picks everything else.

@Hemicrusher Those rules are for complete close down to the feasible minimum, and still there is a possibility of leak. If you only want to block Google DNS (because your device Roku and all Apps...

@Hemicrusher I have IoTs devices from Google/TP-Link, all regular streaming services (e.g. Netflix, Amazon), no torrents!, no UPnP cheaters (is disabled on all routers). Apart from one weird Android...