Blocking app trackers

[peppetech]

Very good point @bonnietwin

@bonnietwin

Additionally for DNS there is the challenge of DoH which many browsers have available and it looks like many intend to make it the default. The DNS resolver will then no longer be from IPFire and the request will be transmitted in encrypted form by the browser and the traffic will be indistinguishable from other https traffic. Only the end point IP will be identifiable.

I posted a DoH IP Blocklist "‘DoH Protection by jpgpi250’ that could be used to block DoH servers.
Unfortunately when using it with the IPFIRE blocklist. it will block DNS DoT servers as well, not just DoH. I wonder if Proxy could block DoH even if the traffic is httpS.

Here is an example:
I think blocking DoH is only practical with DNS blocker because blocking IP 1.1.1.1 will block all DNS traffic. DoT, DoH, etc…

Blocking doh.cloudlare.com will only block DoH,
but DoT will still work.