Any way to block all DNS queries and whitelist some?

[jon]

I’ll add a shameless plug for something I have been playing experimenting with:

DoHblock - Blocking DNS over HTTPS via RPZ

Continuing the discussion from: I read through many of the PDFs from jpgpi250 and I really like this one for DoH blocking: https://github.com/jpgpi250/piholemanual/blob/master/doc/Unbound%20response%20policy%20zones.pdf This looks like it will block DoH servers and (this is the best part) the DoH rpz list is updated most every day. I think RPZ (i.e., Unbound’s Response Policy Zones) will solve the issues found when running it as a blocklist. So I gave it a try. Installing RPZ on an IPFire…

Instead of blocking DoH, you can use it to block MS.

Think of it as changing the topic title to MSblock - Blocking MS via RPZ.

Do you know the domain names (maybe with sub-domains) you want to block?