Forcing all DNS traffic from the LAN to the firewall

[hellfire]

@bbitsch

For DNSoverTLS ( DoT ) this isn’t possible, because of not matching certificates.

So this is the reason why you commented out those lines with port 853, right?